Skip to content

fix(updater): 同步 updater pubkey 与新签名密钥对 - #73

Open
veyvin wants to merge 13 commits into
Cloxl:mainfrom
veyvin:trae/agent-knpO3O
Open

fix(updater): 同步 updater pubkey 与新签名密钥对#73
veyvin wants to merge 13 commits into
Cloxl:mainfrom
veyvin:trae/agent-knpO3O

feat: Tauri Updater Private Key Error

d31eeeb
Select commit
Loading
Failed to load commit list.
Sourcery AI / Sourcery review failed Aug 5, 2026 in 1m 37s

❌ Found 19 blocking security issues

Sourcery found 19 blocking security issues:

  • server/go.mod:0 - golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing
  • server/go.mod:0 - golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto
  • server/go.mod:0 - golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh
  • server/go.mod:0 - golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS
  • server/go.mod:0 - golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions
  • server/go.mod:0 - golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters
  • server/go.mod:0 - golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses
  • server/go.mod:0 - golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check
  • server/go.mod:0 - golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions
  • server/go.mod:0 - golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate
  • server/go.mod:0 - golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey
  • server/go.mod:0 - golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation
  • server/go.mod:0 - golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs
  • server/go.mod:0 - golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html
  • server/go.mod:0 - golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting
  • server/go.mod:0 - golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass
  • server/go.mod:0 - net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame
  • server/go.mod:0 - golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing
  • server/go.mod:0 - A norm.Iter can enter an infinite loop when handling input containing ...