Upgrading golang.org/x/image 0.40 to 0.41
Unknownv0.40.0 → v0.41.0Security2
SecurityExcessive resource consumption in PackBits decompression in golang.org/x/image/tiffGHSA-q675-qj96-32m9 · CVE-2026-46599 ↗
UnknownUpgrade verdict
DepDelta hasn't looked for this range's notes yet, so breaking changes can't be ruled out.
In plain terms
- DepDelta hasn't finished looking for the notes in this range, so it can't rule out breaking changes yet.
- Their commits are listed with this comparison.
Must act 2 items need code or config changes
What you must change
Security2
Excessive resource consumption in PackBits decompression in golang.org/x/image/tiff
Panic when reading out of bound palette index in golang.org/x/image/bmp