Skip to content

chore(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 - #6527

Merged
gansheer merged 1 commit into
apache:mainfrom
gansheer:chore/updgrade-x-net
Mar 12, 2026
Merged

gansheer merged 1 commit into
apache:mainfrom
gansheer:chore/updgrade-x-net

Conversation

@gansheer

@gansheer gansheer commented Mar 12, 2026

Copy link
Copy Markdown
Contributor

Fixes:

Vulnerability #1: GO-2026-4559
    Sending certain HTTP/2 frames can cause a server to panic in
    golang.org/x/net
  More info: https://pkg.go.dev/vuln/GO-2026-4559
  Module: golang.org/x/net
    Found in: golang.org/x/net@v0.50.0
    Fixed in: golang.org/x/net@v0.51.0
    Example traces found:
Error:       #1: pkg/util/kubernetes/log/util.go:53:28: log.DumpLog calls rest.Request.Stream, which eventually calls http2.ClientConn.Close
Error:       #2: pkg/client/camel/clientset/versioned/typed/camel/v1/camel_client.go:85:39: camel.NewForConfig calls rest.HTTPClientFor, which eventually calls http2.ConfigureTransports
Error:       #3: pkg/apis/camel/v1/integration_types_support.go:411:21: camel.IntegrationStatus.SetErrorCondition calls http2.ConnectionError.Error
Error:       #4: pkg/util/source/inspector_yaml.go:224:37: source.YAMLInspector.parseStepsParam calls http2.ErrCode.String
....

@gansheer
gansheer requested a review from squakez March 12, 2026 13:51
@gansheer
gansheer merged commit ecc9593 into apache:main Mar 12, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants