Package
mcp-grafana-fips
Component
google.golang.org/grpc
Latest update
Fixed version
1.5.1-r1
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Fixed version
1.5.1-r1Status
Impact
Fix requires grpc-go >=1.83.1 (GHSA-qc2q-p7wx-3px3), which pulls in OpenTelemetry core >=1.44.0 as a required dependency. The package's own source hardcodes an older otel/semconv schema import that panics at runtime against the newer otel schema default, so the two cannot currently coexist. No upstream release resolves this yet: the latest tag still ships grpc-go below the fix version, and the shared grafana-plugin-sdk-go dependency's newest release only reaches grpc-go 1.83.0.
Status