v7.15.3

domcyrus/rustnetv7.15.3Jun 9, 2026by github-actions[bot]

AI Summary

This version primarily serves as a security and dependency update, upgrading the Golang runtime to v1.26.4 and addressing multiple CVE vulnerabilities. The update ensures all dependencies are up to date alongside the core language upgrade.

Key Highlights

Golang version upgrade to v1.26.4
Upgrade of all dependencies to their latest versions
Addressed 12 specific CVEs (security patches)
Migration of reverse proxy handling

Full Release Notes

## Release Highlights

- 🔵 Golang version upgrade to v1.26.4
    - Upgrade of all dependencies to their latest versions
-  🕵️‍♀️ Vulnerabilities have ben addressed
    - [CVE-2026-33811](https://nvd.nist.gov/vuln/detail/CVE-2026-33811)
    - [CVE-2026-33814](https://nvd.nist.gov/vuln/detail/CVE-2026-33814)
    - [CVE-2026-39820](https://nvd.nist.gov/vuln/detail/CVE-2026-39820)
    - [CVE-2026-39836](https://nvd.nist.gov/vuln/detail/CVE-2026-39836)
    - [CVE-2026-42499](https://nvd.nist.gov/vuln/detail/CVE-2026-42499)
    - [CVE-2026-42504](https://nvd.nist.gov/vuln/detail/CVE-2026-42504)
    - [CVE-2026-39823](https://nvd.nist.gov/vuln/detail/CVE-2026-39823)
    - [CVE-2026-39826](https://nvd.nist.gov/vuln/detail/CVE-2026-39826)
    - [CVE-2026-39825](https://nvd.nist.gov/vuln/detail/CVE-2026-39825)
    - [CVE-2026-27145](https://nvd.nist.gov/vuln/detail/CVE-2026-27145)
    - [CVE-2026-42507](https://nvd.nist.gov/vuln/detail/CVE-2026-42507)

## Important Notes

## Breaking Changes

## Changes since v7.15.2

- [#3477](https://github.com/oauth2-proxy/oauth2-proxy/pull/3477) chore(dep): bump go to 1.26 and migrate of reverse proxy handling