mirror of
https://github.com/tiennm99/coolify.git
synced 2026-08-20 06:23:23 +00:00
The pinned cloudflared 2025.7.0 is built with Go 1.24.4 and grpc v1.72.2, which carry two CRITICAL vulnerabilities: - CVE-2025-68121 (crypto/tls: incorrect certificate validation during TLS session resumption), fixed in Go 1.24.13 - CVE-2026-33186 (grpc-go authz: authorization bypass due to improper HTTP/2 path validation), fixed in grpc 1.79.3 cloudflared 2026.7.3 ships patched Go/grpc; a Trivy scan of the official linux-amd64 binary reports zero CRITICAL findings.