Skip to content

fix(security): remediate CVE vulnerabilities in release-0.10 - #354

Open
ulucinar wants to merge 1 commit into
release-0.10from
fix/cve-remediation-release-0.10-20260912-111652
Open

fix(security): remediate CVE vulnerabilities in release-0.10#354
ulucinar wants to merge 1 commit into
release-0.10from
fix/cve-remediation-release-0.10-20260912-111652

Conversation

@ulucinar

@ulucinar ulucinar commented Sep 12, 2026

Copy link
Copy Markdown
Collaborator

Summary

This PR fixes CVE vulnerabilities identified by security scanning.

Vulnerabilities Fixed

CVE/GHSA Severity Package Fixed Version
GHSA-vp52-pcj8-j9qc High google.golang.org/grpc v1.83.2
GHSA-qc2q-p7wx-3px3 Medium google.golang.org/grpc v1.83.2
GHSA-2v4p-qf9q-27wj High google.golang.org/grpc v1.83.2

Changes Made

  • Updated google.golang.org/grpc from v1.82.1 to v1.83.2 in go.mod
  • Ran go mod tidy to update transitive dependencies

References

Verification

  • Rescanned with cve-scan skill after fixes
  • All listed vulnerabilities resolved

@ulucinar
fix(security): remediate CVE vulnerabilities
3203180 
- Update google.golang.org/grpc to v1.83.2 (fixes GHSA-vp52-pcj8-j9qc, GHSA-qc2q-p7wx-3px3, GHSA-2v4p-qf9q-27wj)

Signed-off-by: Alper Rifat Ulucinar <ulucinar@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sergenyalcin sergenyalcin Awaiting requested review from sergenyalcin sergenyalcin is a code owner
@turkenf turkenf Awaiting requested review from turkenf turkenf is a code owner
@negz negz Awaiting requested review from negz negz is a code owner
@phisco phisco Awaiting requested review from phisco phisco is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ulucinar