# Dapr 1.13.4

## Update the golang.org/x/net dependency to v0.24.0

### Problem

Dapr used a Golang dependency for golang.org/x/net that contained the following [CVE](https://www.cvedetails.com/cve/CVE-2023-45288/).

### Impact

CVE details [here](https://www.cvedetails.com/cve/CVE-2023-45288/).

### Root cause

CVE details [here](https://www.cvedetails.com/cve/CVE-2023-45288/).

### Solution

The dependency version was updated from v0.21.0 to v0.24.0