Wiz: Upgrade multiple dependencies (resolves 30 findings)

[wiz-code-21c5ec5a85]

Wiz has created this PR to fix 30 findings detected in this project

Changes were made to the following file(s):

• go.mod
• go.sum

Vulnerabilities:

Component	Findings	Locations
github.com/ethereum/go-ethereum 1.12.0 → 1.17.0	CVE-2026-26314 CVE-2023-40591 CVE-2024-32972 CVE-2026-22868 CVE-2026-22862 CVE-2026-26313 CVE-2026-26315	/go.mod
github.com/redis/go-redis/v9 9.7.0 → 9.7.3	CVE-2025-29923	/go.mod
golang.org/x/crypto 0.25.0 → 0.52.0	CVE-2026-46595 CVE-2026-39831 CVE-2024-45337 CVE-2026-39830 CVE-2026-39832 CVE-2026-42508 CVE-2026-39834 CVE-2026-39833 CVE-2025-47913 CVE-2026-46597 CVE-2025-22869 CVE-2026-39829 CVE-2026-39828 CVE-2026-46598 CVE-2026-39827 CVE-2026-39835 CVE-2025-58181 CVE-2025-47914	/go.mod
golang.org/x/net 0.27.0 → 0.55.0	CVE-2026-39821 CVE-2025-22870 CVE-2026-25680 CVE-2025-22872	/go.mod

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	github.com/​ethereum/​go-ethereum@​v1.12.0 ⏵ v1.17.0	+1	+61
	github.com/​redis/​go-redis/​v9@​v9.7.0 ⏵ v9.7.3	+1	+1
	github.com/​google/​go-cmp@​v0.6.0 ⏵ v0.7.0	+1
	github.com/​stretchr/​testify@​v1.10.0 ⏵ v1.11.1	+1

View full report

[socket-security]

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Block		Install-time scripts: golang github.com/ethereum/c-kzg-4844/v2 Install script: Package overview Source: undefined From: ? → golang/github.com/ethereum/go-ethereum@v1.17.0 → golang/github.com/ethereum/c-kzg-4844/v2@v2.1.5 ℹ Read more on: This package | This alert | What is an install script? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/github.com/ethereum/c-kzg-4844/v2@v2.1.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Block		Install-time scripts: golang github.com/supranational/blst Install script: Package overview Source: undefined From: ? → golang/github.com/ethereum/go-ethereum@v1.17.0 → golang/github.com/supranational/blst@v0.3.16-0.20250831170142-f48500c1fdbe ℹ Read more on: This package | This alert | What is an install script? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/github.com/supranational/blst@v0.3.16-0.20250831170142-f48500c1fdbe. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[wiz-code-21c5ec5a85]

Wiz Scan Summary

Scanner	Findings
Vulnerabilities	1
Sensitive Data	-
Secrets	-
IaC Misconfigurations	-
SAST Findings	-
Software Management Findings	-
Total	1

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

[wiz-code-21c5ec5a85]

Wiz Scan Summary

Scanner	Findings
Vulnerabilities	1
Sensitive Data	-
Secrets	-
IaC Misconfigurations	-
SAST Findings	-
Software Management Findings	-
Total	1

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.