From ada3cf42d47047664247a67010a4030e6e4874ae Mon Sep 17 00:00:00 2001 From: kycheng Date: Fri, 23 Oct 2026 06:20:25 +0800 Subject: [PATCH] build: pin go toolchain to 1.27.3 (CVE-2026-111943) setup-go reads go-version-file: go.mod; without a toolchain directive it installed go1.27.2, leaving the crypto/x509 stdlib CVE unpatched. .go-version is not consulted by this build path. Co-Authored-By: Claude Opus 4.8 --- go.mod | 1 + 1 file changed, 1 insertion(+) diff --git a/go.mod b/go.mod index fd923b5591a83..194a822dbb94d 100644 --- a/go.mod +++ b/go.mod @@ -7,6 +7,7 @@ module k8s.io/kubernetes go 1.27.2 +toolchain go1.27.3 godebug default=go1.26