No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Hi team,
we got a new high scored CVE, could you take a look? Is there any chance that it will be resolved with the nearest release?
name                      severity publish_date resource                                     version      fix_version
--------------------- --------- --------------- ----------------------------------- ------------ -------------
CVE-2026-39883 high       2026-04-10 <http://go.opentelemetry.io/otel/sdk|go.opentelemetry.io/otel/sdk>   v1.42.0     1.43.0
Regards,
Przemek

<https://github.com/pulumi/pulumi/pull/22596>

Great! Would it be also updated for pulumi azure-native?

The same CVE falls under the resource path there: `root/.pulumi/plugins/resource-azure-native-v3.16.0/pulumi-resource-azure-native`

Looks like azure-native has been updated <https://github.com/pulumi/pulumi-azure-native/pull/4660>, I don't know what the release schedule is for the providers team though.
The CLI release should be tomorrow.