cert-manager

Action needed (6)

• securityhighThe golang.org/x/net, golang.org/x/text, and golang.org/x/crypto versions

  golang.org/x/net is updated to v0.58.0, golang.org/x/text to v0.41.0, and golang.org/x/crypto to v0.55.0. The updates fix CVE-2026-46600, CVE-2026-56852, and CVE-2026-56854.

  CVE-2026-46600CVE-2026-56852CVE-2026-56854

• securityhighThe google.golang.org/grpc version and advisory fixes

  google.golang.org/grpc is updated to v1.83.2 to fix CVE-2026-84304, CVE-2026-84445, CVE-2026-84303, GHSA-vp52-pcj8-j9qc, GHSA-2v4p-qf9q-27wj, and GHSA-hrxh-6v49-42gf.

  CVE-2026-84304CVE-2026-84445CVE-2026-84303

• securityThe Go version and standard library security fixes

  Go is updated to 1.26.5 and then 1.26.6. These versions include security fixes for the go command and the crypto/tls, encoding/asn1, encoding/xml, html/template, net, net/http, and net/url packages.

• securitymediumThe github.com/google/cel-go version

  github.com/google/cel-go is updated to v0.30.0 to fix the reported vulnerability GHSA-gcjh-h69q-9w9g.

  a reported vulnerability

• securityThe security-scanned Go dependencies

  golang.org/x/mod, go.opentelemetry.io/otel, and go.etcd.io/etcd/client/pkg/v3 are updated to versions flagged by security scanners.

• securitymediumThe software.sslmate.com/src/go-pkcs12 version

  software.sslmate.com/src/go-pkcs12 is updated to v0.7.2 to fix the reported vulnerability GHSA-mpwr-8vm7-h73f.

  a reported vulnerability