Skip to content

security: vulnerability remediation - #67

Open
kernel-internal[bot] wants to merge 1 commit into
mainfrom
security/vuln-remediation
Open

security: vulnerability remediation#67
kernel-internal[bot] wants to merge 1 commit into
mainfrom
security/vuln-remediation

Conversation

@kernel-internal

@kernel-internal kernel-internal Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

Vulnerability Remediation

This PR was generated by the Socket-centric vulnerability remediation workflow. Review the planned dependency changes and confirmation evidence before merging.

Fixed

CVE/GHSA Package Ecosystem Old Version New Version Manifest Confirmation
GHSA-2v4p-qf9q-27wj GHSA-2v4p-qf9q-27wj None None see lockfile confirmed

Not Included

  • Deferred by batch limit: 5 advisories. They will be considered by future runs.
  • Other deferred scanner findings: 2.
  • Unconfirmed attempted fixes: 0.
Deferred details
CVE/GHSA Package Reason
Unavailable from detector github.com/docker/docker Non-CVE alert is not handled by dependency remediation.
Unavailable from detector google.golang.org/grpc Non-CVE alert is not handled by dependency remediation.

@kernel-internal
kernel-internal Bot force-pushed the security/vuln-remediation branch from f4bead8 to 5b2e80b Compare September 9, 2026 03:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant