bug: Vuln Scan Fixes#3829

Merged

piotr-roslaniec merged 28 commits intothreshold-network:release/v2.2.0-prepfrom

jose-blockchain:vuln-fix

Oct 9, 2025

Commits on Aug 12, 2025

quic-go library v0.39.4 -> v0.42.0 Fixes 2 Medium issues w/Exploit
jose-blockchain
committed
reverting the quic-go version from v0.42.0 back to v0.39.4; keep golang bump
jose-blockchain
committed
qtls-go1-20: v0.3.4 → v0.4.1; not called libcrypto in this context
jose-blockchain
committed
golang.org/x/net: v0.18.0 → v0.23.0 and others
jose-blockchain
committed
Upgrade Alpine Linux from 3.19 to 3.20 (newer version with security patches) for muls critical vulns
jose-blockchain
committed
go-ethereum: v1.13.11 → v1.13.15 (High-severity vulnerability fixed)
jose-blockchain
committed
google.golang.org/protobuf: v1.31.0 → v1.33.0
jose-blockchain
committed
Alpine Linux: 3.20 → 3.21 for busybox libs 1.36.1-r15 to 1.36.1-r19
jose-blockchain
committed
quic-go: v0.39.4 → v0.40.1 (2 medium-severity vulnerabilities fixed)
jose-blockchain
committed
btcd: v0.23.1 → v0.23.2 1 critical/high + 2 medium vulns addressed
jose-blockchain
committed

Commits on Aug 14, 2025

Commits on Oct 8, 2025