From 6997d60c793d88c7fcb2eea3c187d20c7cd3f2a9 Mon Sep 17 00:00:00 2001 From: Ryan Richard Date: Tue, 3 Mar 2026 10:03:26 -0800 Subject: [PATCH] extend exclusion for CVE-2026-24051 --- pipelines/pull-requests/pipeline.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pipelines/pull-requests/pipeline.yml b/pipelines/pull-requests/pipeline.yml index 601b2cdff..dfd82e336 100644 --- a/pipelines/pull-requests/pipeline.yml +++ b/pipelines/pull-requests/pipeline.yml @@ -637,7 +637,7 @@ jobs: # so we should have no exposure to this issue. We can wait for the next version of k8s packages to # update this dependency, if they choose to do so. # See https://ossindex.sonatype.org/vulnerability/CVE-2026-24051?component-type=golang&component-name=go.opentelemetry.io%2Fotel%2Fsdk&utm_source=nancy-client&utm_medium=integration&utm_content=1.2.0 - CVE-2026-24051 until=2026-04-04 + CVE-2026-24051 until=2026-06-04 EOF