mirror of
https://github.com/stablyai/orca.git
synced 2026-10-30 16:47:34 +00:00
Neil
5c5f9a2362
* chore(cloud): update relay runtimes and security scanning * docs(cloud): record Go binary advisory reachability * chore(cloud): rerun security checks after resolving main conflict
14 lines
600 B
YAML
14 lines
600 B
YAML
vulnerabilities:
|
|
- id: CVE-2026-111943
|
|
statement: >-
|
|
The latest official Cloud SQL Auth Proxy v2.26.2 (2026-10-14) embeds
|
|
Go 1.27.2. Upstream has not published a proxy built with Go 1.27.3.
|
|
Recheck the official release before rollout; the full report retains this HIGH finding.
|
|
expired_at: 2026-11-04
|
|
- id: DSA-6572-1
|
|
statement: >-
|
|
The latest official v2.26.2 distroless image predates Debian's
|
|
ca-certificates 20250419+deb13u1 rebuild. Await the official patched image;
|
|
the complete report retains this UNKNOWN finding.
|
|
expired_at: 2026-11-04
|