Skip to content

VULN UPGRADE: google.golang.org/grpc (minor → v1.79.1) [grpc_check/tests]#2922

Closed
campaigner-prod[bot] wants to merge 1 commit intomasterfrom
engraver-auto-version-upgrade/minorpatch/go/tests/3-1772767654
Closed

VULN UPGRADE: google.golang.org/grpc (minor → v1.79.1) [grpc_check/tests]#2922
campaigner-prod[bot] wants to merge 1 commit intomasterfrom
engraver-auto-version-upgrade/minorpatch/go/tests/3-1772767654

Conversation

@campaigner-prod
Copy link
Copy Markdown
Contributor

Summary: High-severity security update — 1 package upgraded (MINOR changes included)

Manifests changed:

  • grpc_check/tests (go)

Updates

Package From To Type Vulnerabilities Fixed
google.golang.org/grpc v1.48.0 v1.79.1 minor 2 HIGH

Security Details

🚨 Critical & High Severity (2 fixed)
Package CVE Severity Summary Unsafe Version Fixed In
google.golang.org/grpc GHSA-m425-mq94-257g HIGH gRPC-Go HTTP/2 Rapid Reset vulnerability v1.48.0 1.56.3
google.golang.org/grpc GO-2023-2153 HIGH Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc v1.48.0 1.56.3
⚠️ Dependencies that have Reached EOL (1)
Dependency Unsafe Version EOL Date New Version Path
google.golang.org/grpc v1.48.0 Jul 12, 2025 v1.79.1 grpc_check/tests/docker/go.mod

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI

Update Mode: Vulnerability Remediation (High)

🤖 Generated by DataDog Automated Dependency Management System

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants