Skip to content

Request to patch dependencies to fix CVEs #354

@andthum

Description

@andthum

Hi,

Our security scanner finds the following vulnerabilities in our oauth-proxy container image.

Is it possible for you to upgrade the dependencies to the fixed versions?

Thank you!

Vulnerability Severity CVSS3 Package Current Version Fixed in version
CVE-2026-33186 Critical NVD: 9.1 google.golang.org/grpc v1.68.1 1.79.3
CVE-2026-24051 High NVD: 7 go.opentelemetry.io/otel/sdk v1.33.0 1.40.0

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions