Declan Teevan 4a686228e1 fix: security dependency upgrades ...

Prior to patch, occuring/reproducable when gRPC service is directly
exposed (not behind a reverse proxy / load balancer that enforces HTTP/2
compliance - path normalisation).

This would not present a public-facing issue within the current version
of this project; no user-facing gRPC routes are made avaliable that
aren't already behind `grpc-gateway` for enforcing the mappings.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

2026-03-22 01:38:32 +00:00

3.1 KiB

Raw Blame History

View Raw