Skip to content

fix multiple CVE's - #64

Merged
Joeavaikath merged 1 commit into
openshift:oadp-1.5from
weshayutin:oadp15cve
Aug 21, 2026
Merged

fix multiple CVE's#64
Joeavaikath merged 1 commit into
openshift:oadp-1.5from
weshayutin:oadp15cve

Conversation

@weshayutin

@weshayutin weshayutin commented Aug 21, 2026

Copy link
Copy Markdown

fix multiple CVE's
Update golang.org/x/net v0.55.0 -> v0.56.0:

  • GHSA-gg3m-vvp2-p2c5: DoS via invalid SVCB/HTTPS DNS record parsing in dnsmessage
    Update golang.org/x/text v0.37.0 -> v0.39.0:
  • GHSA-jpjm-c3r5-q96r: DoS via infinite loop on invalid UTF-8 input in unicode/norm
    Update google.golang.org/grpc v1.80.0 -> v1.82.1:
  • GHSA-hrxh-6v49-42gf: xDS RBAC authorization bypass, HTTP/2 Rapid Reset DoS, and RBAC NOT-rule panic

Signed-off-by: Wesley Hayutin weshayutin@gmail.com
Co-authored-by: Cursor cursoragent@cursor.com

Update golang.org/x/net v0.55.0 -> v0.56.0:
- CVE-2026-46600: DoS via invalid SVCB/HTTPS DNS record parsing in dnsmessage
Update golang.org/x/text v0.37.0 -> v0.39.0:
- CVE-2026-56852: DoS via infinite loop on invalid UTF-8 input in unicode/norm
Update google.golang.org/grpc v1.80.0 -> v1.82.1:
- GHSA-hrxh-6v49-42gf: xDS RBAC authorization bypass, HTTP/2 Rapid Reset DoS, and RBAC NOT-rule panic

Signed-off-by: Wesley Hayutin <weshayutin@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
@coderabbitai

coderabbitai Bot commented Aug 21, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: dacd73dd-32d2-4aed-a76e-47d5b02d2c20

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@Joeavaikath
Joeavaikath merged commit 6eb5e21 into openshift:oadp-1.5 Aug 21, 2026
3 of 14 checks passed
@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Aug 21, 2026
@openshift-ci

openshift-ci Bot commented Aug 21, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: Joeavaikath, weshayutin

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

lgtm Indicates that a PR is ready to be merged.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants