Back to Dapr

Dapr 1.13.4

docs/release_notes/v1.13.4.md

1.17.6456 B
Original Source

Dapr 1.13.4

Update the golang.org/x/net dependency to v0.24.0

Problem

Dapr used a Golang dependency for golang.org/x/net that contained the following CVE.

Impact

CVE details here.

Root cause

CVE details here.

Solution

The dependency version was updated from v0.21.0 to v0.24.0