Skip to content

fix(security): remediate CVE vulnerabilities - #223

Merged
bobh66 merged 1 commit into
mainfrom
fix/cve-remediation-main-20260724-161458
Aug 3, 2026
Merged

fix(security): remediate CVE vulnerabilities#223
bobh66 merged 1 commit into
mainfrom
fix/cve-remediation-main-20260724-161458

Conversation

@ulucinar

Copy link
Copy Markdown
Collaborator

Summary

This PR fixes CVE vulnerabilities identified by security scanning.

Vulnerabilities Fixed

CVE/GHSA Severity Package Fixed Version
GO-2026-5856 Medium stdlib go1.26.5
GO-2026-4970 High stdlib go1.26.5
GHSA-hrxh-6v49-42gf High google.golang.org/grpc v1.82.1

Changes Made

  • Updated Go version from 1.26.4 to 1.26.5 in go.mod
  • Updated toolchain directive to go1.26.5
  • Updated google.golang.org/grpc from v1.81.1 to v1.82.1
  • Updated GO_VERSION in .github/workflows/ci.yml to 1.26.5
  • Ran go mod tidy to update go.sum

References

Verification

  • Rescanned with cve-scan skill after fixes
  • All listed vulnerabilities resolved

- Update Go version to 1.26.5 (fixes GO-2026-5856, GO-2026-4970)
- Update google.golang.org/grpc to v1.82.1 (fixes GHSA-hrxh-6v49-42gf)
- Update CI workflow Go version to 1.26.5

Signed-off-by: Alper Rifat Ulucinar <ulucinar@users.noreply.github.com>
@bobh66
bobh66 merged commit c051cb1 into main Aug 3, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants