fix: upgrade google.golang.org/grpc to 1.79.3 (CVE-2026-33186) (#22587)
OrbisAI Security committed
May 30, 2026 at 14:12 UTC
d6fb820b52bb91790ef6c234baf1aea382a1ef86
2 files changed
+4
-1
src/go/go.mod
+2
-1
@@ -59,7 +59,7 @@ require (
59
golang.org/x/sync v0.20.0
60
golang.org/x/text v0.37.0
61
golang.zx2c4.com/wireguard/wgctrl v0.0.0-20220504211119-3d4a969bb56b
62
- google.golang.org/grpc v1.79.1 // indirect
62
+ google.golang.org/grpc v1.79.3 // indirect
63
gopkg.in/ini.v1 v1.67.2
64
gopkg.in/rethinkdb/rethinkdb-go.v6 v6.2.2
65
gopkg.in/yaml.v2 v2.4.0
@@ -196,6 +196,7 @@ require (
196
golang.org/x/time v0.14.0 // indirect
197
golang.org/x/tools v0.45.0 // indirect
198
golang.zx2c4.com/wireguard v0.0.0-20250521234502-f333402bd9cb // indirect
199
+ google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 // indirect
200
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect
201
gopkg.in/cenkalti/backoff.v2 v2.2.1 // indirect
202
gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
src/go/go.sum
+2
@@ -570,6 +570,8 @@ google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 h1:
570
google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk=
571
google.golang.org/grpc v1.79.1 h1:zGhSi45ODB9/p3VAawt9a+O/MULLl9dpizzNNpq7flY=
572
google.golang.org/grpc v1.79.1/go.mod h1:KmT0Kjez+0dde/v2j9vzwoAScgEPx/Bw1CYChhHLrHQ=
573
+google.golang.org/grpc v1.79.3 h1:sybAEdRIEtvcD68Gx7dmnwjZKlyfuc61Dyo9pGXXkKE=
574
+google.golang.org/grpc v1.79.3/go.mod h1:KmT0Kjez+0dde/v2j9vzwoAScgEPx/Bw1CYChhHLrHQ=
575
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af h1:+5/Sw3GsDNlEmu7TfklWKPdQ0Ykja5VEmq2i817+jbI=
576
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
577
gopkg.in/airbrake/gobrake.v2 v2.0.9/go.mod h1:/h5ZAUhDkGaJfjzjKLSjv6zCL6O0LLBxU4K+aSYdM/U=