fix(updater): 同步 updater pubkey 与新签名密钥对 - #73
Open
veyvin wants to merge 13 commits into
Open
Sourcery AI / Sourcery review
failed
Aug 5, 2026 in 1m 37s
❌ Found 19 blocking security issues
Sourcery found 19 blocking security issues:
server/go.mod:0- golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsingserver/go.mod:0- golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/cryptoserver/go.mod:0- golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/sshserver/go.mod:0- golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESSserver/go.mod:0- golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissionsserver/go.mod:0- golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parametersserver/go.mod:0- golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responsesserver/go.mod:0- golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence checkserver/go.mod:0- golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictionsserver/go.mod:0- golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificateserver/go.mod:0- golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKeyserver/go.mod:0- golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validationserver/go.mod:0- golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputsserver/go.mod:0- golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/htmlserver/go.mod:0- golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scriptingserver/go.mod:0- golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypassserver/go.mod:0- net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frameserver/go.mod:0- golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processingserver/go.mod:0- A norm.Iter can enter an infinite loop when handling input containing ...
Loading