CVE(s) found in v0.20.5

[github-actions]

Latest lifecycle release v0.20.5 triggered CVE(s) from Grype. For further details, see: https://github.com/buildpacks/lifecycle/actions/runs/12344756209 json: {
"id": "GHSA-29wx-vh33-7x7r",
"severity": "Low",
"description": "Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations"
}
{
"id": "GHSA-v778-237x-gjrc",
"severity": "Critical",
"description": "Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto"
}