Build 342 failure

vuln on ci-dedupe-pending · 99f26a6f52 · queued 2026-09-02 23:45 UTC · finished 2026-09-02 23:56 UTC · ran 15s · Jump to failure

setup

$ git clone ssh://git@127.0.0.1/krz/gitbay.git (99f26a6f52)

step 1/1 go run golang.org/x/vuln/cmd/govulncheck@latest ./... failed

=== Symbol Results ===

Vulnerability #1: GO-2026-6355
    Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh
  More info: https://pkg.go.dev/vuln/GO-2026-6355
  Module: golang.org/x/crypto
    Found in: golang.org/x/crypto@v0.55.0
    Fixed in: golang.org/x/crypto@v0.56.0
    Example traces found:
      #1: internal/sshd/sshd.go:148:46: sshd.Server.handleConn calls ssh.NewServerConn

Vulnerability #2: GO-2026-6354
    Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh
  More info: https://pkg.go.dev/vuln/GO-2026-6354
  Module: golang.org/x/crypto
    Found in: golang.org/x/crypto@v0.55.0
    Fixed in: golang.org/x/crypto@v0.56.0
    Example traces found:
      #1: internal/sshd/sshd.go:148:46: sshd.Server.handleConn calls ssh.NewServerConn

Your code is affected by 2 vulnerabilities from 1 module.
This scan also found 0 vulnerabilities in packages you import and 1
vulnerability in modules you require, but your code doesn't appear to call these
vulnerabilities.
Use '-show verbose' for more details.
exit status 3
step failed: exit status 1