Fix CVE-2025-22869: Go runtime Denial of Service vulnerability #5236
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
PriteshKiri
added
Hacktoberfest
hacktoberfest-accepted
UJESH2K
force-pushed
the
fix/go-runtime-dos
branch
from
41b6cdd to
8c07b9a
Compare
Jonsy13
reviewed
Oct 23, 2025
Jonsy13
reviewed
Oct 23, 2025
UJESH2K
force-pushed
the
fix/go-runtime-dos
branch
3 times, most recently
from
892c5f9 to
72ca6e4
Compare
* fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]>
… user execution (litmuschaos#5203) * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]>
* feat: [5167]: updated probe fetching logic in a fault Signed-off-by: Amit Kumar Das <[email protected]> * feat: [5167]: fixed go fmt Signed-off-by: Amit Kumar Das <[email protected]> --------- Signed-off-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]>
* update: governance Signed-off-by: PriteshKiri <[email protected]> * update: code of conduct Signed-off-by: PriteshKiri <[email protected]> * update: contribution guide Signed-off-by: PriteshKiri <[email protected]> * chore: updated community meetings content in Readme Signed-off-by: PriteshKiri <[email protected]> * fix: community meeting form link Signed-off-by: PriteshKiri <[email protected]> --------- Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]>
Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]>
…addr (litmuschaos#5213) * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <[email protected]> * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]>
Fixed missing experiment pod logs by updating relevant entities and components. Updated workflowRun entity, CustomStepLog controller, and ExperimentRunDetailsPanel to properly handle and display experiment pod logs. Signed-off-by: Harshit Panchbhai <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]>
Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]>
…uschaos#5229) Signed-off-by: Shubham Chaudhary <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]>
Signed-off-by: UJESH KUMAR YADAV <[email protected]>
Signed-off-by: UJESH KUMAR YADAV <[email protected]>
UJESH2K
force-pushed
the
fix/go-runtime-dos
branch
from
244bef8 to
79b19f8
Compare
Contributor
|
Please update this branch with main & resolve conflicts |
Signed-off-by: UJESH KUMAR YADAV <[email protected]>
Jonsy13
reviewed
Oct 26, 2025
test-chaoscenter-mods.ps1
Outdated
| @@ -0,0 +1,85 @@ | |||
| # test-chaoscenter-mods.ps1 | |||
Contributor
There was a problem hiding this comment.
Please remove these power shell scripts.
Jonsy13
reviewed
Oct 26, 2025
Signed-off-by: UJESH KUMAR YADAV <[email protected]>
Signed-off-by: UJESH KUMAR YADAV <[email protected]>
Signed-off-by: UJESH KUMAR YADAV <[email protected]>
UJESH2K
added a commit
to UJESH2K/fix-server-addr
that referenced
this pull request
Oct 28, 2025
…schaos#5236) * fix[5200]: Namespace Compromise via hostPID (litmuschaos#5201) * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution (litmuschaos#5203) * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: [5167]: updated probe fetching logic in a fault (litmuschaos#5199) * feat: [5167]: updated probe fetching logic in a fault Signed-off-by: Amit Kumar Das <[email protected]> * feat: [5167]: fixed go fmt Signed-off-by: Amit Kumar Das <[email protected]> --------- Signed-off-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update Polices (litmuschaos#5186) * update: governance Signed-off-by: PriteshKiri <[email protected]> * update: code of conduct Signed-off-by: PriteshKiri <[email protected]> * update: contribution guide Signed-off-by: PriteshKiri <[email protected]> * chore: updated community meetings content in Readme Signed-off-by: PriteshKiri <[email protected]> * fix: community meeting form link Signed-off-by: PriteshKiri <[email protected]> --------- Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Removes hardcoded namespaces for K8s manifests (litmuschaos#5223) Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Ensure SERVER_ADDR includes scheme on re-download manifestFix server addr (litmuschaos#5213) * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <[email protected]> * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: resolve missing experiment pod logs issue (litmuschaos#5207) Fixed missing experiment pod logs by updating relevant entities and components. Updated workflowRun entity, CustomStepLog controller, and ExperimentRunDetailsPanel to properly handle and display experiment pod logs. Signed-off-by: Harshit Panchbhai <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Added fixes (litmuschaos#5227) Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * chore(3.22.0): Add the installation manifest for 3.22.0 version (litmuschaos#5229) Signed-off-by: Shubham Chaudhary <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Fixed conversion issues and added formatting improvements Signed-off-by: UJESH KUMAR YADAV <[email protected]> * changed all go version to 1.24.0 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Delete test-chaoscenter-mods.ps1 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Delete test-chaoscenter-mods.ps1 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update Dockerfile Signed-off-by: UJESH KUMAR YADAV <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> Signed-off-by: Amit Kumar Das <[email protected]> Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: UJESH2K <[email protected]> Signed-off-by: Harshit Panchbhai <[email protected]> Signed-off-by: Shubham Chaudhary <[email protected]> Co-authored-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Co-authored-by: Bartlomiej Gmerek <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Co-authored-by: harshit12339 <[email protected]> Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]>
UJESH2K
added a commit
to UJESH2K/fix-server-addr
that referenced
this pull request
Oct 28, 2025
…schaos#5236) * fix[5200]: Namespace Compromise via hostPID (litmuschaos#5201) * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution (litmuschaos#5203) * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: [5167]: updated probe fetching logic in a fault (litmuschaos#5199) * feat: [5167]: updated probe fetching logic in a fault Signed-off-by: Amit Kumar Das <[email protected]> * feat: [5167]: fixed go fmt Signed-off-by: Amit Kumar Das <[email protected]> --------- Signed-off-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update Polices (litmuschaos#5186) * update: governance Signed-off-by: PriteshKiri <[email protected]> * update: code of conduct Signed-off-by: PriteshKiri <[email protected]> * update: contribution guide Signed-off-by: PriteshKiri <[email protected]> * chore: updated community meetings content in Readme Signed-off-by: PriteshKiri <[email protected]> * fix: community meeting form link Signed-off-by: PriteshKiri <[email protected]> --------- Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Removes hardcoded namespaces for K8s manifests (litmuschaos#5223) Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Ensure SERVER_ADDR includes scheme on re-download manifestFix server addr (litmuschaos#5213) * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <[email protected]> * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: resolve missing experiment pod logs issue (litmuschaos#5207) Fixed missing experiment pod logs by updating relevant entities and components. Updated workflowRun entity, CustomStepLog controller, and ExperimentRunDetailsPanel to properly handle and display experiment pod logs. Signed-off-by: Harshit Panchbhai <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Added fixes (litmuschaos#5227) Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * chore(3.22.0): Add the installation manifest for 3.22.0 version (litmuschaos#5229) Signed-off-by: Shubham Chaudhary <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Fixed conversion issues and added formatting improvements Signed-off-by: UJESH KUMAR YADAV <[email protected]> * changed all go version to 1.24.0 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Delete test-chaoscenter-mods.ps1 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Delete test-chaoscenter-mods.ps1 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update Dockerfile Signed-off-by: UJESH KUMAR YADAV <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> Signed-off-by: Amit Kumar Das <[email protected]> Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: UJESH2K <[email protected]> Signed-off-by: Harshit Panchbhai <[email protected]> Signed-off-by: Shubham Chaudhary <[email protected]> Co-authored-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Co-authored-by: Bartlomiej Gmerek <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Co-authored-by: harshit12339 <[email protected]> Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]>
Jonsy13
added a commit
that referenced
this pull request
Oct 29, 2025
* Fix JWT module version and checksum issue Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * docs: add missing GCP experiments to documentation table (#5239) Signed-off-by: Gurupriyan D A <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * docs: Add AWS SSM Chaos experiments to AWS experiments table (#5240) * docs: Add AWS SSM Chaos experiments to AWS experiments table Add AWS SSM Chaos By ID and AWS SSM Chaos By Tag experiments Fixes #5237 Signed-off-by: Coder-pro1 <[email protected]> * Fix AWS SSM Chaos links in contents.md Signed-off-by: Seneviratne N S <[email protected]> --------- Signed-off-by: Coder-pro1 <[email protected]> Signed-off-by: Seneviratne N S <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update go.mod Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Updated Runner Type for Ubuntu to latest under github-pages build pipeline (#5249) * Added fixes Signed-off-by: git <[email protected]> * Added fixes Signed-off-by: git <[email protected]> --------- Signed-off-by: git <[email protected]> Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Fix: Patch CVE-2024-45337 (crypto/ssh Authorization Bypass) and stabilize controller-runtime envtest failure (#5244) * Fix: resolved vulnerability issues in server Signed-off-by: UJESH2K <[email protected]> * changed goversion to 1.24.0 in every file Signed-off-by: UJESH KUMAR YADAV <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix(UI): update delete command in Disable Chaos Infrastructure popup (#5253) (#5261) - Corrected command syntax to use commas between resources. - Kept namespace dynamic using ${chaosInfrastructureNamespace}. - Verified in UI. Signed-off-by: Devank Gupta <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix(security): upgrade golang.org/x/oauth2 to v0.27.0 to resolve CVE-2025-22868 (#5233) * fix(security): upgrade golang.org/x/oauth2 to v0.27.0 to resolve CVE-2025-22868 Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * chore: update Go version to 1.24.0 in go.mod, Dockerfile, and CI workflow Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: use stable golang:1.24.0-bookworm base image in Dockerfile Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * 1.25 go version Signed-off-by: UJESH KUMAR YADAV <[email protected]> * golang.org/x/crypto v0.35.0 go version Signed-off-by: UJESH KUMAR YADAV <[email protected]> * golang.org/x/crypto v0.35.0 go version and 1.24 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * changed docker Signed-off-by: UJESH KUMAR YADAV <[email protected]> * changed docker Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Temporary commit before rebase Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Changed trivy to v2 and authentication goversion to 1.24.0 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Revert Trivy v2 change Signed-off-by: UJESH KUMAR YADAV <[email protected]> * changed build.yml from 1.24 to 1.24.0 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * removed trivy version mismatch Signed-off-by: UJESH KUMAR YADAV <[email protected]> * go mod tidy Signed-off-by: UJESH KUMAR YADAV <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update go.mod Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update go.mod Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fixed name issue (#5250) Signed-off-by: VIDHITTS <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Fix CVE-2025-22869: Go runtime Denial of Service vulnerability (#5236) * fix[5200]: Namespace Compromise via hostPID (#5201) * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution (#5203) * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: [5167]: updated probe fetching logic in a fault (#5199) * feat: [5167]: updated probe fetching logic in a fault Signed-off-by: Amit Kumar Das <[email protected]> * feat: [5167]: fixed go fmt Signed-off-by: Amit Kumar Das <[email protected]> --------- Signed-off-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update Polices (#5186) * update: governance Signed-off-by: PriteshKiri <[email protected]> * update: code of conduct Signed-off-by: PriteshKiri <[email protected]> * update: contribution guide Signed-off-by: PriteshKiri <[email protected]> * chore: updated community meetings content in Readme Signed-off-by: PriteshKiri <[email protected]> * fix: community meeting form link Signed-off-by: PriteshKiri <[email protected]> --------- Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Removes hardcoded namespaces for K8s manifests (#5223) Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Ensure SERVER_ADDR includes scheme on re-download manifestFix server addr (#5213) * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <[email protected]> * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: resolve missing experiment pod logs issue (#5207) Fixed missing experiment pod logs by updating relevant entities and components. Updated workflowRun entity, CustomStepLog controller, and ExperimentRunDetailsPanel to properly handle and display experiment pod logs. Signed-off-by: Harshit Panchbhai <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Added fixes (#5227) Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * chore(3.22.0): Add the installation manifest for 3.22.0 version (#5229) Signed-off-by: Shubham Chaudhary <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Fixed conversion issues and added formatting improvements Signed-off-by: UJESH KUMAR YADAV <[email protected]> * changed all go version to 1.24.0 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Delete test-chaoscenter-mods.ps1 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Delete test-chaoscenter-mods.ps1 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update Dockerfile Signed-off-by: UJESH KUMAR YADAV <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> Signed-off-by: Amit Kumar Das <[email protected]> Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: UJESH2K <[email protected]> Signed-off-by: Harshit Panchbhai <[email protected]> Signed-off-by: Shubham Chaudhary <[email protected]> Co-authored-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Co-authored-by: Bartlomiej Gmerek <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Co-authored-by: harshit12339 <[email protected]> Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * docs: update footer year of experiment docs to 2025 (#5277) (#5279) Signed-off-by: Umesh Kumar Pal <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: update FAQ and Troubleshooting headings (#5263) (#5276) Signed-off-by: Umesh Kumar Pal <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: Allow chaos probes with same name across different projects (#5241) * Refactor MongoDB index creation for ChaosProbeCollection Signed-off-by: khushi1310 <[email protected]> * fix-Cannot reuse probe name after deletion Signed-off-by: khushi1310 <[email protected]> * Update Go base image version to 1.24.6 Signed-off-by: khushi1310 <[email protected]> * Update Go version to 1.24 Signed-off-by: khushi1310 <[email protected]> * reverting go version Signed-off-by: khushi1310 <[email protected]> * reverting go version Signed-off-by: khushi1310 <[email protected]> --------- Signed-off-by: khushi1310 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Sarthak Jain <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Show tick icon for completed experiments update (#5260) * Update StatusHeatMap.tsx Signed-off-by: khushi Tiwari <[email protected]> Signed-off-by: khushi1310 <[email protected]> * Update StatusHeatMap.module.scss Signed-off-by: khushi Tiwari <[email protected]> Signed-off-by: khushi1310 <[email protected]> --------- Signed-off-by: khushi1310 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fixed_issue (#5259) Signed-off-by: khushi1310 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: [4998]: added tolerations in chaos engine spec when configured from advanced options (#5271) Signed-off-by: Amit Kumar Das <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix(UI): update delete command in Disable Chaos Infrastructure popup (#5253) (#5274) - Corrected command syntax to use commas between resources. - Kept namespace dynamic using ${chaosInfrastructureNamespace}. - Verified in UI. Signed-off-by: Devank Gupta <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * go mod tidy to all Signed-off-by: UJESH KUMAR YADAV <[email protected]> * resolving conflicts Signed-off-by: UJESH KUMAR YADAV <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> Signed-off-by: Gurupriyan D A <[email protected]> Signed-off-by: Coder-pro1 <[email protected]> Signed-off-by: Seneviratne N S <[email protected]> Signed-off-by: git <[email protected]> Signed-off-by: Devank Gupta <[email protected]> Signed-off-by: VIDHITTS <[email protected]> Signed-off-by: zyue110026 <[email protected]> Signed-off-by: Amit Kumar Das <[email protected]> Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: Harshit Panchbhai <[email protected]> Signed-off-by: Shubham Chaudhary <[email protected]> Signed-off-by: Umesh Kumar Pal <[email protected]> Signed-off-by: khushi1310 <[email protected]> Co-authored-by: Gurupriyan D A <[email protected]> Co-authored-by: Seneviratne N S <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Co-authored-by: git <[email protected]> Co-authored-by: Devank Gupta <[email protected]> Co-authored-by: Vidhit T S <[email protected]> Co-authored-by: zyue110026 <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Co-authored-by: Bartlomiej Gmerek <[email protected]> Co-authored-by: harshit12339 <[email protected]> Co-authored-by: Umesh Pal <[email protected]> Co-authored-by: khushi1310 <[email protected]> Co-authored-by: Sarthak Jain <[email protected]>
UJESH2K
added a commit
to UJESH2K/fix-server-addr
that referenced
this pull request
Oct 29, 2025
…schaos#5236) * fix[5200]: Namespace Compromise via hostPID (litmuschaos#5201) * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution (litmuschaos#5203) * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: [5167]: updated probe fetching logic in a fault (litmuschaos#5199) * feat: [5167]: updated probe fetching logic in a fault Signed-off-by: Amit Kumar Das <[email protected]> * feat: [5167]: fixed go fmt Signed-off-by: Amit Kumar Das <[email protected]> --------- Signed-off-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update Polices (litmuschaos#5186) * update: governance Signed-off-by: PriteshKiri <[email protected]> * update: code of conduct Signed-off-by: PriteshKiri <[email protected]> * update: contribution guide Signed-off-by: PriteshKiri <[email protected]> * chore: updated community meetings content in Readme Signed-off-by: PriteshKiri <[email protected]> * fix: community meeting form link Signed-off-by: PriteshKiri <[email protected]> --------- Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Removes hardcoded namespaces for K8s manifests (litmuschaos#5223) Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Ensure SERVER_ADDR includes scheme on re-download manifestFix server addr (litmuschaos#5213) * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <[email protected]> * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: resolve missing experiment pod logs issue (litmuschaos#5207) Fixed missing experiment pod logs by updating relevant entities and components. Updated workflowRun entity, CustomStepLog controller, and ExperimentRunDetailsPanel to properly handle and display experiment pod logs. Signed-off-by: Harshit Panchbhai <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Added fixes (litmuschaos#5227) Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * chore(3.22.0): Add the installation manifest for 3.22.0 version (litmuschaos#5229) Signed-off-by: Shubham Chaudhary <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Fixed conversion issues and added formatting improvements Signed-off-by: UJESH KUMAR YADAV <[email protected]> * changed all go version to 1.24.0 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Delete test-chaoscenter-mods.ps1 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Delete test-chaoscenter-mods.ps1 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update Dockerfile Signed-off-by: UJESH KUMAR YADAV <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> Signed-off-by: Amit Kumar Das <[email protected]> Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: UJESH2K <[email protected]> Signed-off-by: Harshit Panchbhai <[email protected]> Signed-off-by: Shubham Chaudhary <[email protected]> Co-authored-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Co-authored-by: Bartlomiej Gmerek <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Co-authored-by: harshit12339 <[email protected]> Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]>
UJESH2K
added a commit
to UJESH2K/fix-server-addr
that referenced
this pull request
Oct 29, 2025
* Fix JWT module version and checksum issue Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * docs: add missing GCP experiments to documentation table (litmuschaos#5239) Signed-off-by: Gurupriyan D A <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * docs: Add AWS SSM Chaos experiments to AWS experiments table (litmuschaos#5240) * docs: Add AWS SSM Chaos experiments to AWS experiments table Add AWS SSM Chaos By ID and AWS SSM Chaos By Tag experiments Fixes litmuschaos#5237 Signed-off-by: Coder-pro1 <[email protected]> * Fix AWS SSM Chaos links in contents.md Signed-off-by: Seneviratne N S <[email protected]> --------- Signed-off-by: Coder-pro1 <[email protected]> Signed-off-by: Seneviratne N S <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update go.mod Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Updated Runner Type for Ubuntu to latest under github-pages build pipeline (litmuschaos#5249) * Added fixes Signed-off-by: git <[email protected]> * Added fixes Signed-off-by: git <[email protected]> --------- Signed-off-by: git <[email protected]> Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Fix: Patch CVE-2024-45337 (crypto/ssh Authorization Bypass) and stabilize controller-runtime envtest failure (litmuschaos#5244) * Fix: resolved vulnerability issues in server Signed-off-by: UJESH2K <[email protected]> * changed goversion to 1.24.0 in every file Signed-off-by: UJESH KUMAR YADAV <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix(UI): update delete command in Disable Chaos Infrastructure popup (litmuschaos#5253) (litmuschaos#5261) - Corrected command syntax to use commas between resources. - Kept namespace dynamic using ${chaosInfrastructureNamespace}. - Verified in UI. Signed-off-by: Devank Gupta <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix(security): upgrade golang.org/x/oauth2 to v0.27.0 to resolve CVE-2025-22868 (litmuschaos#5233) * fix(security): upgrade golang.org/x/oauth2 to v0.27.0 to resolve CVE-2025-22868 Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * chore: update Go version to 1.24.0 in go.mod, Dockerfile, and CI workflow Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: use stable golang:1.24.0-bookworm base image in Dockerfile Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * 1.25 go version Signed-off-by: UJESH KUMAR YADAV <[email protected]> * golang.org/x/crypto v0.35.0 go version Signed-off-by: UJESH KUMAR YADAV <[email protected]> * golang.org/x/crypto v0.35.0 go version and 1.24 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * changed docker Signed-off-by: UJESH KUMAR YADAV <[email protected]> * changed docker Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Temporary commit before rebase Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Changed trivy to v2 and authentication goversion to 1.24.0 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Revert Trivy v2 change Signed-off-by: UJESH KUMAR YADAV <[email protected]> * changed build.yml from 1.24 to 1.24.0 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * removed trivy version mismatch Signed-off-by: UJESH KUMAR YADAV <[email protected]> * go mod tidy Signed-off-by: UJESH KUMAR YADAV <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update go.mod Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update go.mod Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fixed name issue (litmuschaos#5250) Signed-off-by: VIDHITTS <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Fix CVE-2025-22869: Go runtime Denial of Service vulnerability (litmuschaos#5236) * fix[5200]: Namespace Compromise via hostPID (litmuschaos#5201) * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution (litmuschaos#5203) * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: [5167]: updated probe fetching logic in a fault (litmuschaos#5199) * feat: [5167]: updated probe fetching logic in a fault Signed-off-by: Amit Kumar Das <[email protected]> * feat: [5167]: fixed go fmt Signed-off-by: Amit Kumar Das <[email protected]> --------- Signed-off-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update Polices (litmuschaos#5186) * update: governance Signed-off-by: PriteshKiri <[email protected]> * update: code of conduct Signed-off-by: PriteshKiri <[email protected]> * update: contribution guide Signed-off-by: PriteshKiri <[email protected]> * chore: updated community meetings content in Readme Signed-off-by: PriteshKiri <[email protected]> * fix: community meeting form link Signed-off-by: PriteshKiri <[email protected]> --------- Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Removes hardcoded namespaces for K8s manifests (litmuschaos#5223) Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Ensure SERVER_ADDR includes scheme on re-download manifestFix server addr (litmuschaos#5213) * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <[email protected]> * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: resolve missing experiment pod logs issue (litmuschaos#5207) Fixed missing experiment pod logs by updating relevant entities and components. Updated workflowRun entity, CustomStepLog controller, and ExperimentRunDetailsPanel to properly handle and display experiment pod logs. Signed-off-by: Harshit Panchbhai <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Added fixes (litmuschaos#5227) Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * chore(3.22.0): Add the installation manifest for 3.22.0 version (litmuschaos#5229) Signed-off-by: Shubham Chaudhary <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Fixed conversion issues and added formatting improvements Signed-off-by: UJESH KUMAR YADAV <[email protected]> * changed all go version to 1.24.0 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Delete test-chaoscenter-mods.ps1 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Delete test-chaoscenter-mods.ps1 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update Dockerfile Signed-off-by: UJESH KUMAR YADAV <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> Signed-off-by: Amit Kumar Das <[email protected]> Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: UJESH2K <[email protected]> Signed-off-by: Harshit Panchbhai <[email protected]> Signed-off-by: Shubham Chaudhary <[email protected]> Co-authored-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Co-authored-by: Bartlomiej Gmerek <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Co-authored-by: harshit12339 <[email protected]> Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * docs: update footer year of experiment docs to 2025 (litmuschaos#5277) (litmuschaos#5279) Signed-off-by: Umesh Kumar Pal <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: update FAQ and Troubleshooting headings (litmuschaos#5263) (litmuschaos#5276) Signed-off-by: Umesh Kumar Pal <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: Allow chaos probes with same name across different projects (litmuschaos#5241) * Refactor MongoDB index creation for ChaosProbeCollection Signed-off-by: khushi1310 <[email protected]> * fix-Cannot reuse probe name after deletion Signed-off-by: khushi1310 <[email protected]> * Update Go base image version to 1.24.6 Signed-off-by: khushi1310 <[email protected]> * Update Go version to 1.24 Signed-off-by: khushi1310 <[email protected]> * reverting go version Signed-off-by: khushi1310 <[email protected]> * reverting go version Signed-off-by: khushi1310 <[email protected]> --------- Signed-off-by: khushi1310 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Sarthak Jain <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Show tick icon for completed experiments update (litmuschaos#5260) * Update StatusHeatMap.tsx Signed-off-by: khushi Tiwari <[email protected]> Signed-off-by: khushi1310 <[email protected]> * Update StatusHeatMap.module.scss Signed-off-by: khushi Tiwari <[email protected]> Signed-off-by: khushi1310 <[email protected]> --------- Signed-off-by: khushi1310 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fixed_issue (litmuschaos#5259) Signed-off-by: khushi1310 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: [4998]: added tolerations in chaos engine spec when configured from advanced options (litmuschaos#5271) Signed-off-by: Amit Kumar Das <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix(UI): update delete command in Disable Chaos Infrastructure popup (litmuschaos#5253) (litmuschaos#5274) - Corrected command syntax to use commas between resources. - Kept namespace dynamic using ${chaosInfrastructureNamespace}. - Verified in UI. Signed-off-by: Devank Gupta <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * go mod tidy to all Signed-off-by: UJESH KUMAR YADAV <[email protected]> * resolving conflicts Signed-off-by: UJESH KUMAR YADAV <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> Signed-off-by: Gurupriyan D A <[email protected]> Signed-off-by: Coder-pro1 <[email protected]> Signed-off-by: Seneviratne N S <[email protected]> Signed-off-by: git <[email protected]> Signed-off-by: Devank Gupta <[email protected]> Signed-off-by: VIDHITTS <[email protected]> Signed-off-by: zyue110026 <[email protected]> Signed-off-by: Amit Kumar Das <[email protected]> Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: Harshit Panchbhai <[email protected]> Signed-off-by: Shubham Chaudhary <[email protected]> Signed-off-by: Umesh Kumar Pal <[email protected]> Signed-off-by: khushi1310 <[email protected]> Co-authored-by: Gurupriyan D A <[email protected]> Co-authored-by: Seneviratne N S <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Co-authored-by: git <[email protected]> Co-authored-by: Devank Gupta <[email protected]> Co-authored-by: Vidhit T S <[email protected]> Co-authored-by: zyue110026 <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Co-authored-by: Bartlomiej Gmerek <[email protected]> Co-authored-by: harshit12339 <[email protected]> Co-authored-by: Umesh Pal <[email protected]> Co-authored-by: khushi1310 <[email protected]> Co-authored-by: Sarthak Jain <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]>
UJESH2K
added a commit
to UJESH2K/fix-server-addr
that referenced
this pull request
Oct 29, 2025
…schaos#5236) * fix[5200]: Namespace Compromise via hostPID (litmuschaos#5201) * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution (litmuschaos#5203) * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: [5167]: updated probe fetching logic in a fault (litmuschaos#5199) * feat: [5167]: updated probe fetching logic in a fault Signed-off-by: Amit Kumar Das <[email protected]> * feat: [5167]: fixed go fmt Signed-off-by: Amit Kumar Das <[email protected]> --------- Signed-off-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update Polices (litmuschaos#5186) * update: governance Signed-off-by: PriteshKiri <[email protected]> * update: code of conduct Signed-off-by: PriteshKiri <[email protected]> * update: contribution guide Signed-off-by: PriteshKiri <[email protected]> * chore: updated community meetings content in Readme Signed-off-by: PriteshKiri <[email protected]> * fix: community meeting form link Signed-off-by: PriteshKiri <[email protected]> --------- Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Removes hardcoded namespaces for K8s manifests (litmuschaos#5223) Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Ensure SERVER_ADDR includes scheme on re-download manifestFix server addr (litmuschaos#5213) * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <[email protected]> * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: resolve missing experiment pod logs issue (litmuschaos#5207) Fixed missing experiment pod logs by updating relevant entities and components. Updated workflowRun entity, CustomStepLog controller, and ExperimentRunDetailsPanel to properly handle and display experiment pod logs. Signed-off-by: Harshit Panchbhai <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Added fixes (litmuschaos#5227) Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * chore(3.22.0): Add the installation manifest for 3.22.0 version (litmuschaos#5229) Signed-off-by: Shubham Chaudhary <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Fixed conversion issues and added formatting improvements Signed-off-by: UJESH KUMAR YADAV <[email protected]> * changed all go version to 1.24.0 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Delete test-chaoscenter-mods.ps1 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Delete test-chaoscenter-mods.ps1 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update Dockerfile Signed-off-by: UJESH KUMAR YADAV <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> Signed-off-by: Amit Kumar Das <[email protected]> Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: UJESH2K <[email protected]> Signed-off-by: Harshit Panchbhai <[email protected]> Signed-off-by: Shubham Chaudhary <[email protected]> Co-authored-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Co-authored-by: Bartlomiej Gmerek <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Co-authored-by: harshit12339 <[email protected]> Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]>
UJESH2K
added a commit
to UJESH2K/fix-server-addr
that referenced
this pull request
Oct 29, 2025
* Fix JWT module version and checksum issue Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * docs: add missing GCP experiments to documentation table (litmuschaos#5239) Signed-off-by: Gurupriyan D A <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * docs: Add AWS SSM Chaos experiments to AWS experiments table (litmuschaos#5240) * docs: Add AWS SSM Chaos experiments to AWS experiments table Add AWS SSM Chaos By ID and AWS SSM Chaos By Tag experiments Fixes litmuschaos#5237 Signed-off-by: Coder-pro1 <[email protected]> * Fix AWS SSM Chaos links in contents.md Signed-off-by: Seneviratne N S <[email protected]> --------- Signed-off-by: Coder-pro1 <[email protected]> Signed-off-by: Seneviratne N S <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update go.mod Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Updated Runner Type for Ubuntu to latest under github-pages build pipeline (litmuschaos#5249) * Added fixes Signed-off-by: git <[email protected]> * Added fixes Signed-off-by: git <[email protected]> --------- Signed-off-by: git <[email protected]> Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Fix: Patch CVE-2024-45337 (crypto/ssh Authorization Bypass) and stabilize controller-runtime envtest failure (litmuschaos#5244) * Fix: resolved vulnerability issues in server Signed-off-by: UJESH2K <[email protected]> * changed goversion to 1.24.0 in every file Signed-off-by: UJESH KUMAR YADAV <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix(UI): update delete command in Disable Chaos Infrastructure popup (litmuschaos#5253) (litmuschaos#5261) - Corrected command syntax to use commas between resources. - Kept namespace dynamic using ${chaosInfrastructureNamespace}. - Verified in UI. Signed-off-by: Devank Gupta <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix(security): upgrade golang.org/x/oauth2 to v0.27.0 to resolve CVE-2025-22868 (litmuschaos#5233) * fix(security): upgrade golang.org/x/oauth2 to v0.27.0 to resolve CVE-2025-22868 Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * chore: update Go version to 1.24.0 in go.mod, Dockerfile, and CI workflow Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: use stable golang:1.24.0-bookworm base image in Dockerfile Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * 1.25 go version Signed-off-by: UJESH KUMAR YADAV <[email protected]> * golang.org/x/crypto v0.35.0 go version Signed-off-by: UJESH KUMAR YADAV <[email protected]> * golang.org/x/crypto v0.35.0 go version and 1.24 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * changed docker Signed-off-by: UJESH KUMAR YADAV <[email protected]> * changed docker Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Temporary commit before rebase Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Changed trivy to v2 and authentication goversion to 1.24.0 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Revert Trivy v2 change Signed-off-by: UJESH KUMAR YADAV <[email protected]> * changed build.yml from 1.24 to 1.24.0 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * removed trivy version mismatch Signed-off-by: UJESH KUMAR YADAV <[email protected]> * go mod tidy Signed-off-by: UJESH KUMAR YADAV <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update go.mod Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update go.mod Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fixed name issue (litmuschaos#5250) Signed-off-by: VIDHITTS <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Fix CVE-2025-22869: Go runtime Denial of Service vulnerability (litmuschaos#5236) * fix[5200]: Namespace Compromise via hostPID (litmuschaos#5201) * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution (litmuschaos#5203) * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: hostPID set to false Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: [5167]: updated probe fetching logic in a fault (litmuschaos#5199) * feat: [5167]: updated probe fetching logic in a fault Signed-off-by: Amit Kumar Das <[email protected]> * feat: [5167]: fixed go fmt Signed-off-by: Amit Kumar Das <[email protected]> --------- Signed-off-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update Polices (litmuschaos#5186) * update: governance Signed-off-by: PriteshKiri <[email protected]> * update: code of conduct Signed-off-by: PriteshKiri <[email protected]> * update: contribution guide Signed-off-by: PriteshKiri <[email protected]> * chore: updated community meetings content in Readme Signed-off-by: PriteshKiri <[email protected]> * fix: community meeting form link Signed-off-by: PriteshKiri <[email protected]> --------- Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Removes hardcoded namespaces for K8s manifests (litmuschaos#5223) Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Ensure SERVER_ADDR includes scheme on re-download manifestFix server addr (litmuschaos#5213) * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <[email protected]> * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: resolve missing experiment pod logs issue (litmuschaos#5207) Fixed missing experiment pod logs by updating relevant entities and components. Updated workflowRun entity, CustomStepLog controller, and ExperimentRunDetailsPanel to properly handle and display experiment pod logs. Signed-off-by: Harshit Panchbhai <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Added fixes (litmuschaos#5227) Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * chore(3.22.0): Add the installation manifest for 3.22.0 version (litmuschaos#5229) Signed-off-by: Shubham Chaudhary <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Fixed conversion issues and added formatting improvements Signed-off-by: UJESH KUMAR YADAV <[email protected]> * changed all go version to 1.24.0 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Delete test-chaoscenter-mods.ps1 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Delete test-chaoscenter-mods.ps1 Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Update Dockerfile Signed-off-by: UJESH KUMAR YADAV <[email protected]> --------- Signed-off-by: zyue110026 <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> Signed-off-by: Amit Kumar Das <[email protected]> Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: UJESH2K <[email protected]> Signed-off-by: Harshit Panchbhai <[email protected]> Signed-off-by: Shubham Chaudhary <[email protected]> Co-authored-by: zyue110026 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Co-authored-by: Bartlomiej Gmerek <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Co-authored-by: harshit12339 <[email protected]> Co-authored-by: git <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * docs: update footer year of experiment docs to 2025 (litmuschaos#5277) (litmuschaos#5279) Signed-off-by: Umesh Kumar Pal <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: update FAQ and Troubleshooting headings (litmuschaos#5263) (litmuschaos#5276) Signed-off-by: Umesh Kumar Pal <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: Allow chaos probes with same name across different projects (litmuschaos#5241) * Refactor MongoDB index creation for ChaosProbeCollection Signed-off-by: khushi1310 <[email protected]> * fix-Cannot reuse probe name after deletion Signed-off-by: khushi1310 <[email protected]> * Update Go base image version to 1.24.6 Signed-off-by: khushi1310 <[email protected]> * Update Go version to 1.24 Signed-off-by: khushi1310 <[email protected]> * reverting go version Signed-off-by: khushi1310 <[email protected]> * reverting go version Signed-off-by: khushi1310 <[email protected]> --------- Signed-off-by: khushi1310 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Sarthak Jain <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * Show tick icon for completed experiments update (litmuschaos#5260) * Update StatusHeatMap.tsx Signed-off-by: khushi Tiwari <[email protected]> Signed-off-by: khushi1310 <[email protected]> * Update StatusHeatMap.module.scss Signed-off-by: khushi Tiwari <[email protected]> Signed-off-by: khushi1310 <[email protected]> --------- Signed-off-by: khushi1310 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fixed_issue (litmuschaos#5259) Signed-off-by: khushi1310 <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix: [4998]: added tolerations in chaos engine spec when configured from advanced options (litmuschaos#5271) Signed-off-by: Amit Kumar Das <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * fix(UI): update delete command in Disable Chaos Infrastructure popup (litmuschaos#5253) (litmuschaos#5274) - Corrected command syntax to use commas between resources. - Kept namespace dynamic using ${chaosInfrastructureNamespace}. - Verified in UI. Signed-off-by: Devank Gupta <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> * go mod tidy to all Signed-off-by: UJESH KUMAR YADAV <[email protected]> * resolving conflicts Signed-off-by: UJESH KUMAR YADAV <[email protected]> --------- Signed-off-by: UJESH2K <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]> Signed-off-by: Gurupriyan D A <[email protected]> Signed-off-by: Coder-pro1 <[email protected]> Signed-off-by: Seneviratne N S <[email protected]> Signed-off-by: git <[email protected]> Signed-off-by: Devank Gupta <[email protected]> Signed-off-by: VIDHITTS <[email protected]> Signed-off-by: zyue110026 <[email protected]> Signed-off-by: Amit Kumar Das <[email protected]> Signed-off-by: PriteshKiri <[email protected]> Signed-off-by: Bartlomiej Gmerek <[email protected]> Signed-off-by: Harshit Panchbhai <[email protected]> Signed-off-by: Shubham Chaudhary <[email protected]> Signed-off-by: Umesh Kumar Pal <[email protected]> Signed-off-by: khushi1310 <[email protected]> Co-authored-by: Gurupriyan D A <[email protected]> Co-authored-by: Seneviratne N S <[email protected]> Co-authored-by: Pritesh Kiri <[email protected]> Co-authored-by: Vedant Shrotria <[email protected]> Co-authored-by: git <[email protected]> Co-authored-by: Devank Gupta <[email protected]> Co-authored-by: Vidhit T S <[email protected]> Co-authored-by: zyue110026 <[email protected]> Co-authored-by: Amit Kumar Das <[email protected]> Co-authored-by: Shubham Chaudhary <[email protected]> Co-authored-by: Bartlomiej Gmerek <[email protected]> Co-authored-by: harshit12339 <[email protected]> Co-authored-by: Umesh Pal <[email protected]> Co-authored-by: khushi1310 <[email protected]> Co-authored-by: Sarthak Jain <[email protected]> Signed-off-by: UJESH KUMAR YADAV <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
8 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Overview
This PR addresses the Denial of Service (DoS) vulnerability CVE-2025-22869 in the Go runtime (affecting version 1.25.3). The fix upgrades the Go runtime and ensures stability across all modules.
Root Cause
Certain standard library components in Go runtime versions prior to 1.26.1 could be exploited under heavy load, leading to service crashes.
Changes Made
Validation
Linked Issue
Fixes #5234
Types of Changes
Checklist
Special Notes for Reviewers