# Upgrade go stdlib to resolve CVEs

**URL:** <https://community.temporal.io/t/upgrade-go-stdlib-to-resolve-cves/14543>\
**Category:** Server Deployment\
**Created:** [October 11, 2024, 5:00pm UTC](https://community.temporal.io/t/upgrade-go-stdlib-to-resolve-cves/14543 "2024-10-11T17:00:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bbemis](https://avatars.discourse-cdn.com/v4/letter/b/6de8d8/32.png) [@bbemis](https://community.temporal.io/u/bbemis)\
**Post date:** [October 11, 2024, 5:00pm UTC](https://community.temporal.io/t/upgrade-go-stdlib-to-resolve-cves/14543/1 "2024-10-11T17:00:15Z")

</div>

Hi,

I am using a trivy scan to detect vulnerabilities in my project and we recently discovered a handful of vulnerabilities in the temporal-server image version 1.25.1. Looking at them they all seem to be related to the go stdlib version

would it be possible to upgrade out of these in the next server version?

 ![Untitled 3](https://us1.discourse-cdn.com/flex016/uploads/temporal/original/2X/4/4174bc344655666b7ab41a8ff0f2a957dc166161.png)

---

<div class="post-metadata">

**Author:** ![tihomir](https://sea2.discourse-cdn.com/flex016/user_avatar/community.temporal.io/tihomir/32/6580_2.png) [@tihomir](https://community.temporal.io/u/tihomir)\
**Post date:** [October 14, 2024, 8:30pm UTC](https://community.temporal.io/t/upgrade-go-stdlib-to-resolve-cves/14543/2 "2024-10-14T20:30:45Z")

</div>

Thanks for reporting. Will report to our security team. For these types of finds always feel free to also create github issue: [Issues · temporalio/temporal · GitHub](https://github.com/temporalio/temporal/issues)

---

<div class="post-metadata">

**Author:** ![Yichao\_Yang](https://sea2.discourse-cdn.com/flex016/user_avatar/community.temporal.io/yichao_yang/32/5518_2.png) [@Yichao\_Yang](https://community.temporal.io/u/Yichao_Yang)\
**Post date:** [October 16, 2024, 5:23pm UTC](https://community.temporal.io/t/upgrade-go-stdlib-to-resolve-cves/14543/3 "2024-10-16T17:23:40Z")

</div>

Yes. We will upgrade golang version to latest 1.23 in our next minor release, 1.26.0, which is planned to go out in Dec. 2024.
