From c444450931df23e09ca53be21000d45484badee5 Mon Sep 17 00:00:00 2001 From: adityamehra Date: Thu, 16 Jul 2026 13:58:13 -0700 Subject: [PATCH] fix(security): upgrade google-adk minimum version to 1.28.1 (CVE-2026-4810) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps the minimum required version of google-adk from 1.14.1 to 1.28.1 to remediate CVE-2026-4810 (CRITICAL) — a Code Injection and Missing Authentication vulnerability that allows unauthenticated remote code execution on servers hosting ADK instances. Resolves: VULN-88790 Co-authored-by: Cursor --- examples/agent/google-adk/requirements.txt | 4 ++-- splunk-ao-adk/pyproject.toml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/examples/agent/google-adk/requirements.txt b/examples/agent/google-adk/requirements.txt index a8801ae6..8ba4dbaa 100644 --- a/examples/agent/google-adk/requirements.txt +++ b/examples/agent/google-adk/requirements.txt @@ -1,4 +1,4 @@ -google-adk +google-adk>=1.28.1 openinference-instrumentation-google-adk python-dotenv -splunk-ao \ No newline at end of file +splunk-ao diff --git a/splunk-ao-adk/pyproject.toml b/splunk-ao-adk/pyproject.toml index 96e46476..94723c49 100644 --- a/splunk-ao-adk/pyproject.toml +++ b/splunk-ao-adk/pyproject.toml @@ -15,7 +15,7 @@ classifiers = [ ] dependencies = [ "splunk-ao>=0.1.0,<1.0.0", - "google-adk>=1.14.1,<2.0.0", + "google-adk>=1.28.1,<2.0.0", ] [project.urls]