chore(deps): bump golang.org/x/crypto from 0.36.0 to 0.45.0 #3
dependabot[bot]Annotations
4 errors
|
docker
Process completed with exit code 2.
|
|
build
Process completed with exit code 2.
|
|
build:
pkg/encryption/cipher.go#L82
SA1019: cipher.NewCFBDecrypter has been deprecated since Go 1.24 and an alternative has been available since Go 1.2: CFB mode is not authenticated, which generally enables active attacks to manipulate and recover the plaintext. It is recommended that applications use [AEAD] modes instead. The standard library implementation of CFB is also unoptimized and not validated as part of the FIPS 140-3 module. If an unauthenticated [Stream] mode is required, use [NewCTR] instead. (staticcheck)
|
|
build:
pkg/encryption/cipher.go#L69
SA1019: cipher.NewCFBEncrypter has been deprecated since Go 1.24 and an alternative has been available since Go 1.2: CFB mode is not authenticated, which generally enables active attacks to manipulate and recover the plaintext. It is recommended that applications use [AEAD] modes instead. The standard library implementation of CFB is also unoptimized and not validated as part of the FIPS 140-3 module. If an unauthenticated [Stream] mode is required, use [NewCTR] instead. (staticcheck)
|