Skip to content

Conversation

@sanikachavan5
Copy link
Contributor

PCI review checklist

  • I have documented a clear reason for, and description of, the change I am making.

  • If applicable, I've documented a plan to revert these changes if they require more than reverting the pull request.

  • If applicable, I've documented the impact of any changes to security controls.

    Examples of changes to security controls include using new access control methods, adding or removing logging pipelines, etc.

@sanikachavan5 sanikachavan5 requested review from a team as code owners August 21, 2025 08:20
CHANGELOG.md Outdated
## v0.13.4 (Aug 21, 2025)

SECURITY:
* Critical Golang vulnerabilities (CVE-2025-22869, CVE-2025-22871) in v0.13.3 [[GH-380](https://github.com/hashicorp/envconsul/pull/380)]
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
* Critical Golang vulnerabilities (CVE-2025-22869, CVE-2025-22871) in v0.13.3 [[GH-380](https://github.com/hashicorp/envconsul/pull/380)]
* fix: critical Golang vulnerabilities (CVE-2025-22869, CVE-2025-22871) [[GH-380](https://github.com/hashicorp/envconsul/pull/380)]

"CVE-2025-46394" # fix unavailable at time of writing
]
}
}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove these suppression, we don't need to merge suppression in main branch. only CHANGELOG is needed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants