CVE update (#23443)

panman90 · web-flow · commit d428353e0211 · 2026-04-08T11:27:30.000Z
* version update for go-jose/v3 &amp; go-jose/v4, cve suppression for linux alpine

* updating go version
diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl
@@ -47,7 +47,9 @@ container {
         "CVE-2025-14524",
         "CVE-2025-14819",
         "CVE-2025-30258",
-        "CVE-2026-27171"
+        "CVE-2026-27171",
+        "GO-2026-4923",
+        "GHSA-6jwv-w5xf-7j27"
       ]
 
       paths = [
@@ -97,7 +99,10 @@ binary {
   # periodically cleaned up to remove items that are no longer found by the scanner.
   triage {
     suppress {
-      vulnerabilities = [ "GO-2026-4923" ]
+      vulnerabilities = [
+        "GO-2026-4923",
+        "GHSA-6jwv-w5xf-7j27"
+        ]
       
       paths = [
         "internal/tools/proto-gen-rpc-glue/e2e/consul/*",
diff --git a/api/go.mod b/api/go.mod
@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/api
 
-go 1.25.8
+go 1.25.9
 
 replace github.com/hashicorp/consul/sdk => ../sdk
 
diff --git a/envoyextensions/go.mod b/envoyextensions/go.mod
@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/envoyextensions
 
-go 1.25.8
+go 1.25.9
 
 replace (
 	github.com/hashicorp/consul/api => ../api
diff --git a/go.mod b/go.mod
@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul
 
-go 1.25.8
+go 1.25.9
 
 replace (
 	github.com/hashicorp/consul/api => ./api
diff --git a/internal/tools/proto-gen-rpc-glue/e2e/consul/go.mod b/internal/tools/proto-gen-rpc-glue/e2e/consul/go.mod
@@ -1,5 +1,5 @@
 module github.com/hashicorp/consul
 
-go 1.25.8
+go 1.25.9
 
 require google.golang.org/protobuf v1.36.11
diff --git a/internal/tools/proto-gen-rpc-glue/e2e/go.mod b/internal/tools/proto-gen-rpc-glue/e2e/go.mod
@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/internal/tools/proto-gen-rpc-glue/e2e
 
-go 1.25.8
+go 1.25.9
 
 replace github.com/hashicorp/consul => ./consul
 
diff --git a/internal/tools/proto-gen-rpc-glue/go.mod b/internal/tools/proto-gen-rpc-glue/go.mod
@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/internal/tools/proto-gen-rpc-glue
 
-go 1.25.8
+go 1.25.9
 
 require github.com/stretchr/testify v1.8.4
 
diff --git a/internal/tools/protoc-gen-consul-rate-limit/go.mod b/internal/tools/protoc-gen-consul-rate-limit/go.mod
@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/internal/tools/protoc-gen-consul-rate-limit
 
-go 1.25.8
+go 1.25.9
 
 replace github.com/hashicorp/consul/proto-public => ../../../proto-public
 
diff --git a/proto-public/go.mod b/proto-public/go.mod
@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/proto-public
 
-go 1.25.8
+go 1.25.9
 
 require (
 	google.golang.org/grpc v1.79.3
diff --git a/sdk/go.mod b/sdk/go.mod
@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/sdk
 
-go 1.25.8
+go 1.25.9
 
 require (
 	github.com/hashicorp/go-cleanhttp v0.5.2
diff --git a/test-integ/go.mod b/test-integ/go.mod
@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/test-integ
 
-go 1.25.8
+go 1.25.9
 
 require (
 	github.com/google/go-cmp v0.7.0
diff --git a/test/integration/connect/envoy/test-sds-server/go.mod b/test/integration/connect/envoy/test-sds-server/go.mod
@@ -1,6 +1,6 @@
 module test-sds-server
 
-go 1.25.8
+go 1.25.9
 
 require (
 	github.com/envoyproxy/go-control-plane v0.14.0
diff --git a/test/integration/consul-container/go.mod b/test/integration/consul-container/go.mod
@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/test/integration/consul-container
 
-go 1.25.8
+go 1.25.9
 
 require (
 	fortio.org/fortio v1.54.0
diff --git a/test/integration/consul-container/test/envoy_extensions/testdata/wasm_test_files/go.mod b/test/integration/consul-container/test/envoy_extensions/testdata/wasm_test_files/go.mod
@@ -1,6 +1,6 @@
 module main
 
-go 1.25.8
+go 1.25.9
 
 require github.com/tetratelabs/proxy-wasm-go-sdk v0.21.0
 
diff --git a/testing/deployer/go.mod b/testing/deployer/go.mod
@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/testing/deployer
 
-go 1.25.8
+go 1.25.9
 
 require (
 	github.com/avast/retry-go v3.0.0+incompatible
diff --git a/troubleshoot/go.mod b/troubleshoot/go.mod
@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/troubleshoot
 
-go 1.25.8
+go 1.25.9
 
 replace (
 	github.com/hashicorp/consul/api => ../api
