Upgrading golang.org/x/crypto 0.16 to 0.17
Unknownv0.16.0 → v0.17.0Security1
SecurityMan-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/cryptoGHSA-45x7-px36-x8w8 · CVE-2023-48795 ↗
UnknownUpgrade verdict
The only release in this range publishes no notes, so breaking changes can't be ruled out.
In plain terms
- Some releases in this range publish no notes, so DepDelta can't rule out breaking changes.
- DepDelta found no commit log for them either.
Must act 1 item needs code or config changes
What you must change
Security1
Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto