GO-2026-5508
axonflow-sdk-go: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification in github.com/getaxonflow/axonflow-sdk-go
Quick fix
GO-2026-5508 — github.com/getaxonflow/axonflow-sdk-go/v5: upgrade to the fixed version with the command below.
go get github.com/getaxonflow/axonflow-sdk-go/v5@v5.7.0Details
axonflow-sdk-go: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification in github.com/getaxonflow/axonflow-sdk-go
Are you affected?
Enter the version of the package you're using.
Affected packages
0No fixed version published yet for github.com/getaxonflow/axonflow-sdk-go (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/getaxonflow/axonflow-sdk-go/v2 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/getaxonflow/axonflow-sdk-go/v3 (go modules). Pin to a known-safe version or switch to an alternative.
0No fixed version published yet for github.com/getaxonflow/axonflow-sdk-go/v4 (go modules). Pin to a known-safe version or switch to an alternative.
0Fixed in: 5.7.0go get github.com/getaxonflow/axonflow-sdk-go/v5@v5.7.0