audits: R-972 govulncheck before/after (Go 1.27.3)

documentation/audits/r972-go1273-2026-10-26/after-felhom-agent.txt

@@ -0,0 +1,9 @@
+=== Symbol Results ===
+
+No vulnerabilities found.
+
+Your code is affected by 0 vulnerabilities.
+This scan also found 0 vulnerabilities in packages you import and 1
+vulnerability in modules you require, but your code doesn't appear to call these
+vulnerabilities.
+Use '-show verbose' for more details.

documentation/audits/r972-go1273-2026-10-26/after-felhom-controller-controller.txt

@@ -0,0 +1,9 @@
+=== Symbol Results ===
+
+No vulnerabilities found.
+
+Your code is affected by 0 vulnerabilities.
+This scan also found 0 vulnerabilities in packages you import and 1
+vulnerability in modules you require, but your code doesn't appear to call these
+vulnerabilities.
+Use '-show verbose' for more details.

documentation/audits/r972-go1273-2026-10-26/after-felhom.eu-hub.txt

@@ -0,0 +1,9 @@
+=== Symbol Results ===
+
+No vulnerabilities found.
+
+Your code is affected by 0 vulnerabilities.
+This scan also found 0 vulnerabilities in packages you import and 1
+vulnerability in modules you require, but your code doesn't appear to call these
+vulnerabilities.
+Use '-show verbose' for more details.

documentation/audits/r972-go1273-2026-10-26/before-felhom-agent.txt

@@ -0,0 +1,16 @@
+=== Symbol Results ===
+
+Vulnerability #1: GO-2026-6809
+    Distrust compromised intermediate certificates in crypto/x509
+  More info: https://pkg.go.dev/vuln/GO-2026-6809
+  Standard library
+    Found in: crypto/x509@go1.27.2
+    Fixed in: crypto/x509@go1.27.3
+    Example traces found:
+      #1: internal/pbs/probe.go:42:33: pbs.ProbeFingerprint calls tls.Conn.HandshakeContext, which eventually calls x509.Certificate.Verify
+
+Your code is affected by 1 vulnerability from the Go standard library.
+This scan also found 0 vulnerabilities in packages you import and 1
+vulnerability in modules you require, but your code doesn't appear to call these
+vulnerabilities.
+Use '-show verbose' for more details.

documentation/audits/r972-go1273-2026-10-26/before-felhom-controller-controller.txt

@@ -0,0 +1,16 @@
+=== Symbol Results ===
+
+Vulnerability #1: GO-2026-6809
+    Distrust compromised intermediate certificates in crypto/x509
+  More info: https://pkg.go.dev/vuln/GO-2026-6809
+  Standard library
+    Found in: crypto/x509@go1.27.2
+    Fixed in: crypto/x509@go1.27.3
+    Example traces found:
+      #1: internal/notify/notifier.go:1291:9: notify.Notifier.PushTestEventSync calls io.Copy, which eventually calls x509.Certificate.Verify
+
+Your code is affected by 1 vulnerability from the Go standard library.
+This scan also found 0 vulnerabilities in packages you import and 1
+vulnerability in modules you require, but your code doesn't appear to call these
+vulnerabilities.
+Use '-show verbose' for more details.

documentation/audits/r972-go1273-2026-10-26/before-felhom.eu-hub.txt

@@ -0,0 +1,16 @@
+=== Symbol Results ===
+
+Vulnerability #1: GO-2026-6809
+    Distrust compromised intermediate certificates in crypto/x509
+  More info: https://pkg.go.dev/vuln/GO-2026-6809
+  Standard library
+    Found in: crypto/x509@go1.27.2
+    Fixed in: crypto/x509@go1.27.3
+    Example traces found:
+      #1: cmd/hub/main.go:215:15: hub.main calls fmt.Fprintf, which eventually calls x509.Certificate.Verify
+
+Your code is affected by 1 vulnerability from the Go standard library.
+This scan also found 0 vulnerabilities in packages you import and 1
+vulnerability in modules you require, but your code doesn't appear to call these
+vulnerabilities.
+Use '-show verbose' for more details.