Skip to content

[user-authn] Fix CVEs#17518

Merged
nabokihms merged 1 commit into
mainfrom
user-authn/fix-cve
Jan 16, 2026
Merged

[user-authn] Fix CVEs#17518
nabokihms merged 1 commit into
mainfrom
user-authn/fix-cve

Conversation

@Jabejixo

@Jabejixo Jabejixo commented Jan 16, 2026

Copy link
Copy Markdown
Contributor

Description

This PR fixes:

This PR updates Go dependencies in user-authn module images to address the listed CVEs.

Why do we need it, and what problem does it solve?

It removes known vulnerabilities from the user-authn module container images by updating affected dependencies, reducing security risk for clusters.

Why do we need it in the patch release (if we do)?

Not necessarily.

Checklist

  • The code is covered by unit tests.
  • e2e tests passed.
  • Documentation updated according to the changes.
  • Changes were tested in the Kubernetes cluster manually.

Changelog entries

section: user-authn
type: fix
summary: Fixed multiple CVEs in user-authn module images by updating dependencies.
impact_level: default

Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>
@Jabejixo Jabejixo added this to the v1.75.0 milestone Jan 16, 2026
@Jabejixo Jabejixo requested a review from nabokihms as a code owner January 16, 2026 14:47
@github-actions github-actions Bot added area/auth Pull requests that update auth modules type/dependencies Pull requests that update a dependency file labels Jan 16, 2026
@nabokihms nabokihms merged commit def2d2d into main Jan 16, 2026
39 of 41 checks passed
@nabokihms nabokihms deleted the user-authn/fix-cve branch January 16, 2026 15:44
MrZuwZuw pushed a commit that referenced this pull request Jan 21, 2026
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>
Glitchy-Sheep pushed a commit that referenced this pull request Jan 26, 2026
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>
@mortelumina98 mortelumina98 changed the title [user-authn] fix CVEs [user-authn] Fix CVEs Feb 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/auth Pull requests that update auth modules type/dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants