Fix security vulnerabilites

[szjakabgetbridge]

JIRA

• https://getbridge.atlassian.net/browse/PLT-974

Changes

• fixed the following vulnearbilites:
  GHSA-6v2p-p543-phr9 (malformed token → excessive memory)
  GHSA-hcg3-q754-cr77 (SSH server DoS via slow key exchange)

go test, go build and govulncheck passed

Checklist

• • Feature Flag Required
• • Bug

Test plan

• • Walk-through
• • Peer review
• • Inspection
• Detailed steps and prerequisites for validating the change:

Risk Analysis - the risk of change is evaluated

• • Low - Majority of the changes are low risk which doesn’t require extra testing, only code review by 1 reviewer
    • • 1 reviewer
• • Medium - Some portions of changes are medium risk which needs peer testing and review by 2 reviewers
    • • 2 reviewers
    • • peer testing
• • High - A very few breaking changes are high risk and need very throughout testing and review and also a coordinated release process.
    • • 2 reviewers
    • • peer testing
    • • coordinated release

[jppakalapati]

Since we updated the go version, can you please update the github actions to install the matching version?

[jppakalapati]

Looks good