🔒 Dependency Dashboard #9

Open
opened 2026-08-27 23:04:58 +00:00 by Headscracher · 0 comments
Owner

🔒 Dependency Dashboard (1)

1 unknown

Severity Package Installed Fixed in Advisory
⚫ Unknown golang.org/x/crypto 0.56.0 0.58.1-0.20261009181718-2f1f834330b2 GO-2026-5932
golang.org/x/crypto 0.56.0 — The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.

If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package.

affected >=0 <0.58.1-0.20261009181718-2f1f834330b2 · found in go.mod

https://go.dev/issue/44226 · https://go.dev/issue/81227


Scanned 1 lockfile(s) · 2026-11-03 10:24 UTC · dependabork

<!-- dependabork:v1 --> <!-- hash:f02093994a58baa1 --> # 🔒 Dependency Dashboard (1) **1 unknown** | Severity | Package | Installed | Fixed in | Advisory | |---|---|---|---|---| | ⚫ Unknown | golang.org/x/crypto | 0.56.0 | 0.58.1-0.20261009181718-2f1f834330b2 | [GO-2026-5932](https://osv.dev/vulnerability/GO-2026-5932) | <details><summary>golang.org/x/crypto 0.56.0 — The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues</summary> The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used. If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package. affected `>=0 <0.58.1-0.20261009181718-2f1f834330b2` · found in `go.mod` <https://go.dev/issue/44226> · <https://go.dev/issue/81227> </details> --- _Scanned 1 lockfile(s) · 2026-11-03 10:24 UTC · dependabork_
Sign in to join this conversation.
No labels
dependabork
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
Headscracher/planka_discord_bridge#9
No description provided.