CVE-2023-44487

[CAR6807]

High vulnerability CVE-2023-44487 is present in v1.6.1

google.golang.org/grpc v1.53.0

looks to be fixed v1.56.3

[shobhit-kumar-code]

@mustafaakin THere are a few dependabot PRs that need to be merged to address CVE

[shobhit-kumar-code]

@mustafaakin - gentle reminder for this CVE and a few others in this repo. Or can this be delegated to someone else?

[CAR6807]

Any updated on this

[Sherzod5]

Is there any update on this issue?

[vlad-kopylash-deel]

I see there are 2 PRs trying to fix this issue

• fix: Update gprc and apimachinery libraries to fix CVE-2023-44487 #225
• bump go version and fixed all CVEs #230

Any way I can help to speed this up?