# Security vulnerability in temporal image

**URL:** <https://community.temporal.io/t/security-vulnerability-in-temporal-image/6224>\
**Category:** Server Deployment\
**Tags:** security\
**Created:** [October 14, 2022, 5:52am UTC](https://community.temporal.io/t/security-vulnerability-in-temporal-image/6224 "2022-10-14T05:52:51Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![naresh](https://avatars.discourse-cdn.com/v4/letter/n/c68b51/32.png) [@naresh](https://community.temporal.io/u/naresh)\
**Post date:** [October 14, 2022, 5:52am UTC](https://community.temporal.io/t/security-vulnerability-in-temporal-image/6224/1 "2022-10-14T05:52:51Z")

</div>

Hi,  
Our security team detected the “CVE-2022-27664” vulnerability with the temporal image. They are asking us to upgrade the golang version to 1.18.6. I am going through all the temporal images; the latest one (1.18.1) uses go 1.18. Are there any security risks with this version? Does the temporal server use net/HTTP libraries?

Thanks  
Naresh

---

<div class="post-metadata">

**Author:** ![Mike\_McBryde](https://sea2.discourse-cdn.com/flex016/user_avatar/community.temporal.io/mike_mcbryde/32/1615_2.png) [@Mike\_McBryde](https://community.temporal.io/u/Mike_McBryde)\
**Post date:** [October 14, 2022, 8:04pm UTC](https://community.temporal.io/t/security-vulnerability-in-temporal-image/6224/2 "2022-10-14T20:04:27Z")

</div>

Hi Naresh,

I’m tracking down the issue now; what scanner are you using to find this issue? (Trivy?)

Thanks,  
Mike

---

<div class="post-metadata">

**Author:** ![naresh](https://avatars.discourse-cdn.com/v4/letter/n/c68b51/32.png) [@naresh](https://community.temporal.io/u/naresh)\
**Post date:** [October 14, 2022, 8:47pm UTC](https://community.temporal.io/t/security-vulnerability-in-temporal-image/6224/3 "2022-10-14T20:47:05Z")

</div>

Hi Mike,

Thanks for the response. We are using Orca.security.

Naresh

---

<div class="post-metadata">

**Author:** ![naresh](https://avatars.discourse-cdn.com/v4/letter/n/c68b51/32.png) [@naresh](https://community.temporal.io/u/naresh)\
**Post date:** [October 18, 2022, 7:09pm UTC](https://community.temporal.io/t/security-vulnerability-in-temporal-image/6224/4 "2022-10-18T19:09:23Z")

</div>

Hi Mike,

It would be great if you can let us know the severity level of this security vulnerability. Appreciate your help on this.

Thanks  
Naresh