Cluster information:
Kubernetes version: 1.36
Cloud being used: (put bare-metal if not on a public cloud)
Installation method:
Host OS:
CNI and version:
CRI and version:
grpc package - google.golang.org/grpc - Go Packages has some high severity CVE in 1.36, and these are addressed by this bump, Update google.golang.org/grpc to v1.82.1 by dims · Pull Request #140740 · kubernetes/kubernetes · GitHub, in 1.37 pre-release. I’d like to know is there a specific reason this is not backported to 1.36? Does this count as a breaking change? To me, the behavioral changes here are more on grpc side.