Upgrading golang.org/x/image 0.42 to 0.43
Unknownv0.42.0 → v0.43.0Security3
SecurityPanic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/imageCVE-2026-46601 ↗
UnknownUpgrade verdict
The only release in this range publishes no notes, so breaking changes can't be ruled out.
In plain terms
- Some releases in this range publish no notes, so DepDelta can't rule out breaking changes.
- Their commits are listed with this comparison.
Must act 3 items need code or config changes
What you must change
Security3
Panic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image
Lack of limit on tile sizes in x/image/tiff in golang.org/x/image
Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image