Skip to content

Commit 25b7c80

Browse files
amirbenunclaude
andcommitted
Upgrade Go toolchain from 1.24.10 to 1.25.5 to address CVE-2025-61729
This commit upgrades the Go toolchain to version 1.25.5 to address CVE-2025-61729, a HIGH severity vulnerability in crypto/x509's HostnameError.Error() method that could lead to excessive resource consumption. While Cloudbeat is not directly affected by this vulnerability (it only impacts TLS hostname verification failures), upgrading to the patched Go version is part of standard security maintenance practices. Fixes CVE-2025-61729 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
1 parent 02dff73 commit 25b7c80

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

.go-version

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
1.25.4
1+
1.25.5

go.mod

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
module github.com/elastic/cloudbeat
22

3-
go 1.24.10
3+
go 1.25.5
44

55
require (
66
cloud.google.com/go/asset v1.21.1

0 commit comments

Comments
 (0)