When scanning op-node and optimism's go.mod, CVE-2025-59530 is coming up as a HIGH severity vulnerability by NVD and vendor's like Ubuntu.
While its unclear if this actually affects op-node and its use of QUIC - it would be great if upgrading quic-go could be prioritized.
Looking at the go.mod its currently on version 0.46.0, but unfortunately there were breaking changes in the library at 0.48.0 that would require updating the op-node codebase to be compatible with it before the code compiles and can be tested.