security-proxy:nightly image built with Go < 1.26.5, contains CVE-2026-42505 (crypto/tls)

[jz-yolo]

The quay.io/kuberay/security-proxy:nightly image appears to have been last built on or around May 30, 2026. Go 1.26.5 (released July 7, 2026) includes a fix for CVE-2026-42505 in crypto/tls (CVSS 5.3).

Could the nightly build pipeline be re-run so that a new image is published with Go >= 1.26.5?

Alternatively, if the nightly pipeline has been retired, could a new tagged release of the security-proxy be published?

Thank you!

[win5923]

We will release 1.7.1 probably in next week, which will include the fix for this issue.