Security: golang.org/x/crypto v0.50.0 and x/net v0.53.0 have 15 HIGH CVEs in envoy-gateway binary (v1.8.1)

[palaksingi2324-art]

Affected versions: v1.8.0, v1.8.1
Binary: usr/local/bin/envoy-gateway (gobinary)
Scanner: Trivy v0.71

Vulnerable dependencies:

Library	Installed	Fix Version	CVE Count
golang.org/x/crypto	v0.50.0	v0.52.0	9 HIGH
golang.org/x/net	v0.53.0	v0.55.0	6 HIGH

Key CVEs:

• CVE-2026-39827: SSH channel exhaustion
• CVE-2026-39828: Unauthorized command execution
• CVE-2026-46595: Authorization bypass
• CVE-2026-39821: Privilege escalation via Punycode

Request: Please bump golang.org/x/crypto to v0.52.0+
and golang.org/x/net to v0.55.0+ in the next patch release.

Can we get it fixed ?

[zirain]

will be fixed in v1.8.2, cc @jukie