Introducing Guardian: Guardrails for Vibe Coding →
← Changelog

Steampipe CLI v2.4.5 - security updates

Aug 10, 2026•steampipe

Dependencies

  • Compiled with Go 1.26.5 to remediate CVE-2026-27143 and other Go standard-library vulnerabilities.
  • Bump golang.org/x/crypto to v0.52.0 to remediate CVE-2026-39830 through CVE-2026-39834, CVE-2026-42508 and CVE-2026-46595.
  • Bump github.com/containerd/containerd to v1.7.33 to remediate CVE-2026-46680 and CVE-2026-53488.
  • Bump github.com/go-git/go-git/v5 to v5.19.1 to remediate CVE-2026-45022 and CVE-2026-41506.
  • Bump github.com/go-git/go-billy/v5 to v5.9.0 to remediate CVE-2026-44973.
  • Bump oras.land/oras-go/v2 to v2.6.2 to remediate CVE-2026-50151.
  • Bump github.com/hashicorp/go-getter to v1.8.6 to remediate CVE-2026-4660.
  • Bundled steampipe-postgres-fdw upgraded to v2.2.5, which carries the same Go toolchain and dependency updates.