v7.15.3

lightpanda-io/browserv7.15.3Jun 9, 2026by github-actions[bot]

AI Summary

A security-focused release that upgrades the Go runtime and addresses multiple high-severity vulnerabilities identified in the dependency tree.

Key Highlights

Upgrade Golang version to v1.26.4
Address 12 specific CVE vulnerabilities including CVE-2026-33811 and CVE-2026-39820

New Features

Golang version upgrade
Security vulnerability patches
Reverse proxy handling migration

Full Release Notes

## Release Highlights

- 🔵 Golang version upgrade to v1.26.4
    - Upgrade of all dependencies to their latest versions
-  🕵️‍♀️ Vulnerabilities have ben addressed
    - [CVE-2026-33811](https://nvd.nist.gov/vuln/detail/CVE-2026-33811)
    - [CVE-2026-33814](https://nvd.nist.gov/vuln/detail/CVE-2026-33814)
    - [CVE-2026-39820](https://nvd.nist.gov/vuln/detail/CVE-2026-39820)
    - [CVE-2026-39836](https://nvd.nist.gov/vuln/detail/CVE-2026-39836)
    - [CVE-2026-42499](https://nvd.nist.gov/vuln/detail/CVE-2026-42499)
    - [CVE-2026-42504](https://nvd.nist.gov/vuln/detail/CVE-2026-42504)
    - [CVE-2026-39823](https://nvd.nist.gov/vuln/detail/CVE-2026-39823)
    - [CVE-2026-39826](https://nvd.nist.gov/vuln/detail/CVE-2026-39826)
    - [CVE-2026-39825](https://nvd.nist.gov/vuln/detail/CVE-2026-39825)
    - [CVE-2026-27145](https://nvd.nist.gov/vuln/detail/CVE-2026-27145)
    - [CVE-2026-42507](https://nvd.nist.gov/vuln/detail/CVE-2026-42507)

## Important Notes

## Breaking Changes

## Changes since v7.15.2

- [#3477](https://github.com/oauth2-proxy/oauth2-proxy/pull/3477) chore(dep): bump go to 1.26 and migrate of reverse proxy handling