Security Vulnerability: Update grpc version to at least 1.58.3

[RohanNagar]

Recently a CVE was discovered which affects the current version of grpc used by this tool.

GHSA-m425-mq94-257g

Please update google.golang.org/grpc to 1.58.3 or higher.

[dragonsinth]

But grpcurl doesn't act as an http server? So how are we actually vulnerable?

[dragonsinth]

In other words, I don't see any urgency on this. Dependabot will eventually push an update.

[RohanNagar]

Agreed that the vulnerability shouldn't actually affect grpcurl. Unfortunately, security scanners are flagging this for us so we are looking to have the package upgraded.

[enakshipriya]

+1

[cheslz]

+1 . Please :)

[dragonsinth]

This was already fixed here: #427

[RohanNagar]

@dragonsinth any idea when the next release will be?

[dragonsinth]

IDK, I guess we could do one soon. I figure anyone who super-cares can build from code using the latest Go, to also pull in any hypothetical Golang fixes.