chore(deps): update dependency projectdiscovery/tlsx to v1.1.9

[uniget-bot]

This PR contains the following updates:

Package	Update	Change
projectdiscovery/tlsx	patch	1.1.8 -> 1.1.9

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

projectdiscovery/tlsx (projectdiscovery/tlsx)

v1.1.9

Compare Source

What's Changed

Other Changes

• bump utils version by @​dogancanbakir in https://github.com/projectdiscovery/tlsx/pull/658

Full Changelog: projectdiscovery/tlsx@v1.1.7...v1.1.9

What's Changed

Other Changes

• bugfix: properly handle timeouts during OpenSSL cipher enumeration by @​hackerbuddy in https://github.com/projectdiscovery/tlsx/pull/733

New Contributors

• @​hackerbuddy made their first contribution in https://github.com/projectdiscovery/tlsx/pull/733

Full Changelog: projectdiscovery/tlsx@v1.1.8...v1.1.9

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[nicholasdille-bot]

Auto-approved because label type/renovate is present.

[github-actions]

🔍 Vulnerabilities of ghcr.io/uniget-org/tools/tlsx:1.1.9

📦 Image Reference ghcr.io/uniget-org/tools/tlsx:1.1.9

digest	sha256:1980451ee35346ee8982cc4d45066803270666161c6457deb76261c13d97098b
vulnerabilities
platform	linux/amd64
size	9.0 MB
packages	105

stdlib 1.21.13 (golang) pkg:golang/stdlib@1.21.13 Affected range <1.22.7 Fixed version 1.22.7 Description Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion. Affected range <1.22.7 Fixed version 1.22.7 Description Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635. Affected range <1.22.7 Fixed version 1.22.7 Description Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635. Affected range <1.22.7 Fixed version 1.22.7 Description Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.

github.com/mholt/archiver/v3 3.5.1 (golang) pkg:golang/github.com/mholt/archiver/v3@3.5.1 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affected range >=3.0.0 <=3.5.1 Fixed version Not Fixed CVSS Score 6.1 CVSS Vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N Description A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privileges using the library.

[github-actions]

Attempting automerge. See https://github.com/uniget-org/tools/actions/runs/12966654291.

[github-actions]

PR is clean and can be merged. See https://github.com/uniget-org/tools/actions/runs/12966654291.