Skip to content

Comments

Update module filippo.io/edwards25519 to v1.1.1 [SECURITY]#29

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/go-filippo.io-edwards25519-vulnerability
Open

Update module filippo.io/edwards25519 to v1.1.1 [SECURITY]#29
renovate[bot] wants to merge 1 commit intomainfrom
renovate/go-filippo.io-edwards25519-vulnerability

Conversation

@renovate
Copy link

@renovate renovate bot commented Feb 20, 2026

This PR contains the following updates:

Package Change Age Confidence
filippo.io/edwards25519 v1.1.0v1.1.1 age confidence

GitHub Vulnerability Alerts

CVE-2026-26958

(*Point).MultiScalarMult failed to initialize its receiver.

If the method was called on an initialized point that is not the identity point, MultiScalarMult produced an incorrect result.

If the method was called on an uninitialized point, the behavior was undefined. In particular, if the receiver was the zero value, MultiScalarMult returned an invalid point that compared Equal to every point.

Note that MultiScalarMult is a rarely used advanced API. For example, if you only depend on filippo.io/edwards25519 via github.com/go-sql-driver/mysql, you are not affected. If you were notified of this issue despite not being affected, consider switching to a vulnerability scanner that is more precise and respectful of your attention, like govulncheck.


Release Notes

FiloSottile/edwards25519 (filippo.io/edwards25519)

v1.1.1

Compare Source


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Feb 20, 2026
@renovate renovate bot requested a review from bytemare as a code owner February 20, 2026 04:07
@sonarqubecloud
Copy link

@codecov
Copy link

codecov bot commented Feb 20, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.99%. Comparing base (8c6db5b) to head (62a2d76).

Additional details and impacted files
@@            Coverage Diff             @@
##             main      #29      +/-   ##
==========================================
+ Coverage   97.84%   97.99%   +0.14%     
==========================================
  Files           9        9              
  Lines        1438     1145     -293     
==========================================
- Hits         1407     1122     -285     
+ Misses         22       14       -8     
  Partials        9        9              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants