Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

new release of grpcurl for golang 1.23 #510

Open
cglewis opened this issue Feb 13, 2025 · 1 comment
Open

new release of grpcurl for golang 1.23 #510

cglewis opened this issue Feb 13, 2025 · 1 comment

Comments

@cglewis
Copy link

cglewis commented Feb 13, 2025

The latest released version of grpcurl still has golang 1.21. Can a new released version be cut that uses golang 1.23?

@kfessenden
Copy link

kfessenden commented Feb 21, 2025

Specifically

go 1.21

It appears the Docker base image was updated to 1.23 but the go.mod file was not updated. This results in Critical and High vulnerabilities in the released image (CVE-2024-24790, CVE-2023-45285).

UPDATE: After reviewing #495 it seems this is a known issue with a few ideas on how to resolve. Requesting these changes be made to ensure the built images use go1.23. Thanks for all your work on this project!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants