Go modules · proxy.golang.org

golang.org/x/net

Tls Verification Disabled, Go Cgo Preamble

Why PkgRadar flagged v0.56.1-0.20260623201039-5a3baee349e6

Severity	Signal	Evidence
medium	Tls Verification Disabled	golang.org/x/[email protected]/internal/quic/cmd/interop/main.go

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.56.1-0.20260623201039-5a3baee349e6`	Review	12	2026-06-24
`v0.0.0-20260505230331-49810da71b90`	Low risk	0	2026-06-11
`v0.56.0`	Low risk	0	2026-06-11
`v0.55.1-0.20260609165842-9e7fdbfadb32`	Low risk	0	2026-06-10
`v0.55.1-0.20260608210600-b686e5f3573e`	Low risk	0	2026-06-10
`v0.55.1-0.20260608170621-8a348850ed68`	Low risk	0	2026-06-09
`v0.55.1-0.20260605180524-82e7868a0216`	Low risk	0	2026-06-06
`v0.55.1-0.20260604182645-b64f1fa4c615`	Low risk	0	2026-06-05
`v0.55.1-0.20260603220437-31358cc259a7`	Low risk	0	2026-06-05
`v0.55.1-0.20260602200609-8ecbaa95fea8`	Low risk	0	2026-06-03
`v0.55.1-0.20260602153038-42abb857022c`	Low risk	0	2026-06-03
`v0.55.1-0.20260601203336-9d1bca88f134`	Low risk	0	2026-06-03
`v0.55.1-0.20260601184802-008e5e7789e6`	Low risk	0	2026-06-02

Block this in CI

PkgRadar gates golang.org/x/net (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go golang.org/x/[email protected]