github dapr/dapr v1.13.4
Dapr Runtime v1.13.4

latest release: v1.13.5
one month ago

Dapr 1.13.4

Update the golang.org/x/net dependency to v0.24.0

Problem

Dapr used a Golang dependency for golang.org/x/net that contained the following CVE.

Impact

CVE details here.

Root cause

CVE details here.

Solution

The dependency version was updated from v0.21.0 to v0.24.0

Don't miss a new dapr release

NewReleases is sending notifications on new releases.