Security Vulnerabilities

[ejalberti]

Describe the bug
Image has some CVEs that needs attention.

Description
Following a security check, vulnerabilities were found in some packages, related to high-impact CVEs:

• crypto/tls: https://pkg.go.dev/vuln/GO-2026-4337
• crypto/x509: https://pkg.go.dev/vuln/GO-2025-4155 , https://pkg.go.dev/vuln/GO-2025-4013 and https://pkg.go.dev/vuln/GO-2025-4007
• net/url: https://pkg.go.dev/vuln/GO-2026-4341
• encoding/pem: https://pkg.go.dev/vuln/GO-2025-4009
• GRPC: GHSA-p77j-4mvh-x3m3

[jeffbearer]

The gRPC vulnerability (CVE-2026-33186) is addressed by the dependency bump in #1491. The rest of the findings above have already been addressed.