cloud-sql-connectors/cloud-sql-proxy golang.org/x/crypto is vulnerable to fixable critical severity CVE-2024-45337

[danekantner]

Bug Description

cloud-sql-connectors/cloud-sql-proxy golang.org/x/crypto is vulnerable to fixable critical severity CVE-2024-45337

Example code (or command)

// paste your code or command here

Stacktrace

Steps to reproduce?

Scan latest image gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.14.2 using any vulnerability scanner

Environment

gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.14.2 (this was released Dec 11 and is latest available)

Additional Details

No response

[jackwotherspoon]

Hi @danekantner 👋 Thanks for opening an issue on the Cloud SQL Proxy 😄

This has already been fixed in #2348

We will be cutting a release this week (most likely tomorrow) where this change will go live 🚀

[jackwotherspoon]

This was fixed last week in the latest release, v2.14.3 🚀