Update golang.org/x/image dependency
Author: jowkoCreated Aug 5, 2026Updated Aug 5, 2026
Hello.
This project uses golang.org/x/image in version v0.20.0.
Our dependency scanner discovered such CVEs in package golang.org/x/image:
- CVE-2026-46599 CVSS 7.5, fixed in version v0.41.0
- CVE-2026-33809 CVSS 5.3, fixed in version v0.38.0
Go documentation shows even more vulnerabilities to version up to v0.42.0: https://pkg.go.dev/golang.org/x/image?tab=versions
It would be good to bump this dependency since it is quite old (Sep 4, 2024).
Source: terrastruct/d2