govulncheck 2026-10-04 found called vulns in ingestion (brain-mcp, public), reached via audit.LokiCentral.Push: golang.org/x/net v0.26.0 (GO-2026-4918 HTTP/2 infinite loop, GO-2026-5026) and golang.org/x/text v0.29.0 (GO-2026-5970). x/net -> v0.55.0, x/text -> v0.39.0; tidy also moved x/sync, x/sys, x/term. govulncheck ./... now: 0 called findings (19 in required modules, none reachable). Refs: govulncheck 2026-10-04 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>