VULN UPGRADE: golang.org/x/crypto (minor → v0.46.0) [security/advancedtls]

[campaigner-prod]

Summary: High-severity security update — 1 package upgraded (MINOR changes included)

Manifests changed:

• security/advancedtls (go)

Updates

Package	From	To	Type	Vulnerabilities Fixed
golang.org/x/crypto	v0.32.0	v0.46.0	minor	1 HIGH, 2 MODERATE, 4 UNKNOWN

---

Security Details

🚨 Critical & High Severity (1 fixed)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In
golang.org/x/crypto	GHSA-hcg3-q754-cr77	HIGH	golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange	v0.32.0	0.35.0

ℹ️ Other Vulnerabilities (6)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In
golang.org/x/crypto	GHSA-f6x5-jh6r-wrfv	MODERATE	golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read	v0.32.0	0.45.0
golang.org/x/crypto	GHSA-j5w8-q4qc-rx2x	MODERATE	golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption	v0.32.0	0.45.0
golang.org/x/crypto	GO-2025-3487	unknown	Potential denial of service in golang.org/x/crypto	v0.32.0	0.35.0
golang.org/x/crypto	GO-2025-4135	unknown	Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent	v0.32.0	0.45.0
golang.org/x/crypto	GO-2025-4116	unknown	Potential denial of service in golang.org/x/crypto/ssh/agent	v0.32.0	0.43.0
golang.org/x/crypto	GO-2025-4134	unknown	Unbounded memory consumption in golang.org/x/crypto/ssh	v0.32.0	0.45.0

---

Review Checklist

Enhanced review recommended for this update:

• Review changes for compatibility with your code
• Check release notes for breaking changes
• Run integration tests to verify service behavior
• Test in staging environment before production
• Monitor key metrics after deployment

---

Update Mode: Vulnerability Remediation (High)

🤖 Generated by DataDog Automated Dependency Management System

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 83.12%. Comparing base (e95a4b7) to head (bdeba8b).

Additional details and impacted files

@@            Coverage Diff             @@
##           master       #3      +/-   ##
==========================================
- Coverage   83.25%   83.12%   -0.13%     
==========================================
  Files         387      387              
  Lines       30872    30872              
==========================================
- Hits        25701    25661      -40     
- Misses       3866     3886      +20     
- Partials     1305     1325      +20     

see 30 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.