We released an updated version of the Apigee hybrid software, v1.16.10

## Announcement Announcement ### v1.16.10 On September 17, 2026 we released an updated version of the Apigee hybrid software, v1.16.10. * For information on upgrading, see [Upgrading Apigee hybrid to version v1.16.10](https://cloud.google.com/apigee/docs/hybrid/v1.16/upgrade). * For information on new installations, see [The big picture](https://cloud.google.com/apigee/docs/hybrid/v1.16/big-picture). **Note:** This is a patch release: The container images used in patch releases are integrated with the Apigee hybrid Helm charts. Upgrading to a patch via the Helm chart automatically updates the images. No manual image changes are typically needed. For information on container image support in Apigee hybrid releases, see [Apigee release process](https://cloud.google.com/apigee/docs/release/apigee-release-process#apigee-hybrid-container-images). ## Fix Fixed #### Fixed in this release | Bug ID | Description | | ------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **556750755** | **Fixed an issue where EventFlow (Server-Sent Events) dropped or truncated events following a large (>16 KB) event under load on the http-adaptor datapath.** | | **547712217** | **Fixed an issue where EventFlow (Server-Sent Events) responses larger than 16 KB could be truncated or corrupted across socket reads.** | | **519729209** | **Fixed a SAML XML Signature Wrapping (XSW) vulnerability in the ValidateSAMLAssertion policy.** | | **514384893** | **Hardened the Script policy to block server-side request forgery (SSRF) to link-local addresses.** | | **505645076** | **Fixed a security issue in the OAuthV2 policy to prevent unauthorized token injection via HTTP form parameters.** | | **505543289** | **Fixed thread-safety issues in the Netty client connection pool and channel lifecycle.** | | **503817773** | **Improved security in the OAuthV2 policy implicit grant redirect\_uri validation.** | | **502268966** | **Apigee hybrid now supports optional decoding of percent-encoded path separators (%2F and %5C) before flow selection via the request.path.decode.encoded.separators proxy property.** | | **480770263** | **Fixed an issue in the SpikeArrest policy to handle edge cases that previously caused NullPointerException and 500 errors.** | | **472526232** | **Improved SAML assertion validation in the ValidateSAMLAssertion policy against entity and comment injection.** | | **470375542** | **Fixed a memory leak in WSFrameDecoder that could result in a spike in 503 responses with no\_healthy\_upstream errors.** | | **449228485** | **Apigee hybrid now supports configuring custom Kubernetes PodDisruptionBudget (minAvailable or maxUnavailable) values for Apigee hybrid components in your overrides.yaml file.** | | **402250928** | **Apigee hybrid now supports routing outbound calls from AI policies, such as the Model Armor and semantic caching policies, through an HTTP forward proxy.** | ## Feature Feature **Kubernetes 1.36 support** Apigee hybrid v1.16.10 adds support for Kubernetes 1.36 on Google Kubernetes Engine (GKE), Google Distributed Cloud Virtual for VMware (vSphere), Google Distributed Cloud Virtual for bare metal, Amazon EKS, Azure AKS, and Rancher Kubernetes Engine (RKE2). For more information, see [Supported platforms](https://cloud.google.com/apigee/docs/hybrid/supported-platforms). ## Feature Feature **Forward proxy support for AI policies** Apigee hybrid v1.16.10 adds forward proxy support for AI policies, such as the Model Armor and semantic caching policies. Outbound calls from these policies can now be routed through an HTTP forward proxy. For more information, see [Configure a forward proxy](https://cloud.google.com/apigee/docs/hybrid/v1.16/forward-proxy), [Get started with the Model Armor policies](https://cloud.google.com/apigee/docs/api-platform/tutorials/using-model-armor-policies), and [Get started with semantic caching policies](https://cloud.google.com/apigee/docs/api-platform/tutorials/using-semantic-caching-policies). ## Security Security | Bug ID | Description | | ------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **N/A** | **Security fixes for apigee-asm-ingress.** This addresses the following vulnerabilities: [CVE-2026-33818](https://nvd.nist.gov/vuln/detail/CVE-2026-33818) [CVE-2026-39821](https://nvd.nist.gov/vuln/detail/CVE-2026-39821) [CVE-2026-56853](https://nvd.nist.gov/vuln/detail/CVE-2026-56853) [CVE-2026-56858](https://nvd.nist.gov/vuln/detail/CVE-2026-56858) [CVE-2026-56859](https://nvd.nist.gov/vuln/detail/CVE-2026-56859) [CVE-2026-56860](https://nvd.nist.gov/vuln/detail/CVE-2026-56860) [CVE-2026-56862](https://nvd.nist.gov/vuln/detail/CVE-2026-56862) [CVE-2026-56864](https://nvd.nist.gov/vuln/detail/CVE-2026-56864) [CVE-2026-56865](https://nvd.nist.gov/vuln/detail/CVE-2026-56865) [GHSA-hrxh-6v49-42gf](https://osv.dev/vulnerability/GHSA-hrxh-6v49-42gf) | | **N/A** | **Security fixes for apigee-asm-istiod.** This addresses the following vulnerabilities: [CVE-2026-33818](https://nvd.nist.gov/vuln/detail/CVE-2026-33818) [CVE-2026-39821](https://nvd.nist.gov/vuln/detail/CVE-2026-39821) [CVE-2026-56853](https://nvd.nist.gov/vuln/detail/CVE-2026-56853) [CVE-2026-56858](https://nvd.nist.gov/vuln/detail/CVE-2026-56858) [CVE-2026-56859](https://nvd.nist.gov/vuln/detail/CVE-2026-56859) [CVE-2026-56860](https://nvd.nist.gov/vuln/detail/CVE-2026-56860) [CVE-2026-56862](https://nvd.nist.gov/vuln/detail/CVE-2026-56862) [CVE-2026-56864](https://nvd.nist.gov/vuln/detail/CVE-2026-56864) [CVE-2026-56865](https://nvd.nist.gov/vuln/detail/CVE-2026-56865) [GHSA-hrxh-6v49-42gf](https://osv.dev/vulnerability/GHSA-hrxh-6v49-42gf) | | **N/A** | **Security fixes for apigee-connect-agent.** This addresses the following vulnerabilities: [CVE-2026-33818](https://nvd.nist.gov/vuln/detail/CVE-2026-33818) [CVE-2026-39821](https://nvd.nist.gov/vuln/detail/CVE-2026-39821) [CVE-2026-46600](https://nvd.nist.gov/vuln/detail/CVE-2026-46600) [CVE-2026-56853](https://nvd.nist.gov/vuln/detail/CVE-2026-56853) [CVE-2026-56858](https://nvd.nist.gov/vuln/detail/CVE-2026-56858) [CVE-2026-56859](https://nvd.nist.gov/vuln/detail/CVE-2026-56859) [CVE-2026-56860](https://nvd.nist.gov/vuln/detail/CVE-2026-56860) [CVE-2026-56862](https://nvd.nist.gov/vuln/detail/CVE-2026-56862) [CVE-2026-56864](https://nvd.nist.gov/vuln/detail/CVE-2026-56864) [CVE-2026-56865](https://nvd.nist.gov/vuln/detail/CVE-2026-56865) [CVE-2026-84303](https://nvd.nist.gov/vuln/detail/CVE-2026-84303) [CVE-2026-84304](https://nvd.nist.gov/vuln/detail/CVE-2026-84304) [CVE-2026-84445](https://nvd.nist.gov/vuln/detail/CVE-2026-84445) [GHSA-hrxh-6v49-42gf](https://osv.dev/vulnerability/GHSA-hrxh-6v49-42gf) | | **N/A** | **Security fixes for apigee-fluent-bit.** This addresses the following vulnerabilities: [CVE-2025-13151](https://nvd.nist.gov/vuln/detail/CVE-2025-13151) [CVE-2025-14524](https://nvd.nist.gov/vuln/detail/CVE-2025-14524) [CVE-2025-14819](https://nvd.nist.gov/vuln/detail/CVE-2025-14819) [CVE-2026-14456](https://nvd.nist.gov/vuln/detail/CVE-2026-14456) [CVE-2026-14457](https://nvd.nist.gov/vuln/detail/CVE-2026-14457) [CVE-2026-14662](https://nvd.nist.gov/vuln/detail/CVE-2026-14662) [CVE-2026-14663](https://nvd.nist.gov/vuln/detail/CVE-2026-14663) [CVE-2026-14664](https://nvd.nist.gov/vuln/detail/CVE-2026-14664) [CVE-2026-14666](https://nvd.nist.gov/vuln/detail/CVE-2026-14666) [CVE-2026-14668](https://nvd.nist.gov/vuln/detail/CVE-2026-14668) [CVE-2026-14669](https://nvd.nist.gov/vuln/detail/CVE-2026-14669) [CVE-2026-14670](https://nvd.nist.gov/vuln/detail/CVE-2026-14670) [CVE-2026-14671](https://nvd.nist.gov/vuln/detail/CVE-2026-14671) [CVE-2026-14672](https://nvd.nist.gov/vuln/detail/CVE-2026-14672) [CVE-2026-14673](https://nvd.nist.gov/vuln/detail/CVE-2026-14673) [CVE-2026-14677](https://nvd.nist.gov/vuln/detail/CVE-2026-14677) [CVE-2026-14678](https://nvd.nist.gov/vuln/detail/CVE-2026-14678) [CVE-2026-14679](https://nvd.nist.gov/vuln/detail/CVE-2026-14679) [CVE-2026-14680](https://nvd.nist.gov/vuln/detail/CVE-2026-14680) [CVE-2026-14681](https://nvd.nist.gov/vuln/detail/CVE-2026-14681) [CVE-2026-15741](https://nvd.nist.gov/vuln/detail/CVE-2026-15741) [CVE-2026-15742](https://nvd.nist.gov/vuln/detail/CVE-2026-15742) [CVE-2026-16239](https://nvd.nist.gov/vuln/detail/CVE-2026-16239) [CVE-2026-16241](https://nvd.nist.gov/vuln/detail/CVE-2026-16241) [CVE-2026-18024](https://nvd.nist.gov/vuln/detail/CVE-2026-18024) [CVE-2026-18408](https://nvd.nist.gov/vuln/detail/CVE-2026-18408) [CVE-2026-18798](https://nvd.nist.gov/vuln/detail/CVE-2026-18798) [CVE-2026-19385](https://nvd.nist.gov/vuln/detail/CVE-2026-19385) [CVE-2026-1965](https://nvd.nist.gov/vuln/detail/CVE-2026-1965) [CVE-2026-34743](https://nvd.nist.gov/vuln/detail/CVE-2026-34743) [CVE-2026-3783](https://nvd.nist.gov/vuln/detail/CVE-2026-3783) [CVE-2026-3784](https://nvd.nist.gov/vuln/detail/CVE-2026-3784) [CVE-2026-3805](https://nvd.nist.gov/vuln/detail/CVE-2026-3805) [CVE-2026-4873](https://nvd.nist.gov/vuln/detail/CVE-2026-4873) [CVE-2026-54874](https://nvd.nist.gov/vuln/detail/CVE-2026-54874) [CVE-2026-5545](https://nvd.nist.gov/vuln/detail/CVE-2026-5545) [CVE-2026-5773](https://nvd.nist.gov/vuln/detail/CVE-2026-5773) [CVE-2026-6253](https://nvd.nist.gov/vuln/detail/CVE-2026-6253) [CVE-2026-6276](https://nvd.nist.gov/vuln/detail/CVE-2026-6276) [CVE-2026-63072](https://nvd.nist.gov/vuln/detail/CVE-2026-63072) [CVE-2026-63073](https://nvd.nist.gov/vuln/detail/CVE-2026-63073) [CVE-2026-63074](https://nvd.nist.gov/vuln/detail/CVE-2026-63074) [CVE-2026-63075](https://nvd.nist.gov/vuln/detail/CVE-2026-63075) [CVE-2026-63076](https://nvd.nist.gov/vuln/detail/CVE-2026-63076) [CVE-2026-6429](https://nvd.nist.gov/vuln/detail/CVE-2026-6429) [CVE-2026-6464](https://nvd.nist.gov/vuln/detail/CVE-2026-6464) [CVE-2026-6469](https://nvd.nist.gov/vuln/detail/CVE-2026-6469) [CVE-2026-6470](https://nvd.nist.gov/vuln/detail/CVE-2026-6470) [CVE-2026-6471](https://nvd.nist.gov/vuln/detail/CVE-2026-6471) [CVE-2026-6473](https://nvd.nist.gov/vuln/detail/CVE-2026-6473) [CVE-2026-7168](https://nvd.nist.gov/vuln/detail/CVE-2026-7168) [CVE-2026-75803](https://nvd.nist.gov/vuln/detail/CVE-2026-75803) | | **N/A** | **Security fixes for apigee-hybrid-cassandra-client.** This addresses the following vulnerabilities: [CVE-2026-33818](https://nvd.nist.gov/vuln/detail/CVE-2026-33818) [CVE-2026-39821](https://nvd.nist.gov/vuln/detail/CVE-2026-39821) [CVE-2026-46600](https://nvd.nist.gov/vuln/detail/CVE-2026-46600) [CVE-2026-56853](https://nvd.nist.gov/vuln/detail/CVE-2026-56853) [CVE-2026-56858](https://nvd.nist.gov/vuln/detail/CVE-2026-56858) [CVE-2026-56859](https://nvd.nist.gov/vuln/detail/CVE-2026-56859) [CVE-2026-56860](https://nvd.nist.gov/vuln/detail/CVE-2026-56860) [CVE-2026-56862](https://nvd.nist.gov/vuln/detail/CVE-2026-56862) [CVE-2026-56864](https://nvd.nist.gov/vuln/detail/CVE-2026-56864) [CVE-2026-56865](https://nvd.nist.gov/vuln/detail/CVE-2026-56865) [CVE-2026-84303](https://nvd.nist.gov/vuln/detail/CVE-2026-84303) [CVE-2026-84304](https://nvd.nist.gov/vuln/detail/CVE-2026-84304) [CVE-2026-84445](https://nvd.nist.gov/vuln/detail/CVE-2026-84445) [GHSA-hrxh-6v49-42gf](https://osv.dev/vulnerability/GHSA-hrxh-6v49-42gf) | | **N/A** | **Security fixes for apigee-mart-server.** This addresses the following vulnerabilities: [CVE-2026-55831](https://nvd.nist.gov/vuln/detail/CVE-2026-55831) [CVE-2026-55833](https://nvd.nist.gov/vuln/detail/CVE-2026-55833) [CVE-2026-56745](https://nvd.nist.gov/vuln/detail/CVE-2026-56745) [CVE-2026-56746](https://nvd.nist.gov/vuln/detail/CVE-2026-56746) [CVE-2026-56819](https://nvd.nist.gov/vuln/detail/CVE-2026-56819) [CVE-2026-59898](https://nvd.nist.gov/vuln/detail/CVE-2026-59898) [CVE-2026-59899](https://nvd.nist.gov/vuln/detail/CVE-2026-59899) [CVE-2026-59900](https://nvd.nist.gov/vuln/detail/CVE-2026-59900) [CVE-2026-59901](https://nvd.nist.gov/vuln/detail/CVE-2026-59901) [CVE-2026-59903](https://nvd.nist.gov/vuln/detail/CVE-2026-59903) [CVE-2026-59921](https://nvd.nist.gov/vuln/detail/CVE-2026-59921) [CVE-2026-73508](https://nvd.nist.gov/vuln/detail/CVE-2026-73508) [CVE-2026-75595](https://nvd.nist.gov/vuln/detail/CVE-2026-75595) [CVE-2026-75596](https://nvd.nist.gov/vuln/detail/CVE-2026-75596) | | **N/A** | **Security fixes for apigee-mint-task-scheduler.** This addresses the following vulnerabilities: [CVE-2026-55831](https://nvd.nist.gov/vuln/detail/CVE-2026-55831) [CVE-2026-55833](https://nvd.nist.gov/vuln/detail/CVE-2026-55833) [CVE-2026-56745](https://nvd.nist.gov/vuln/detail/CVE-2026-56745) [CVE-2026-56746](https://nvd.nist.gov/vuln/detail/CVE-2026-56746) [CVE-2026-56819](https://nvd.nist.gov/vuln/detail/CVE-2026-56819) [CVE-2026-59898](https://nvd.nist.gov/vuln/detail/CVE-2026-59898) [CVE-2026-59899](https://nvd.nist.gov/vuln/detail/CVE-2026-59899) [CVE-2026-59900](https://nvd.nist.gov/vuln/detail/CVE-2026-59900) [CVE-2026-59901](https://nvd.nist.gov/vuln/detail/CVE-2026-59901) [CVE-2026-59903](https://nvd.nist.gov/vuln/detail/CVE-2026-59903) [CVE-2026-59921](https://nvd.nist.gov/vuln/detail/CVE-2026-59921) [CVE-2026-73508](https://nvd.nist.gov/vuln/detail/CVE-2026-73508) [CVE-2026-75595](https://nvd.nist.gov/vuln/detail/CVE-2026-75595) [CVE-2026-75596](https://nvd.nist.gov/vuln/detail/CVE-2026-75596) | | **N/A** | **Security fixes for apigee-open-telemetry-collector.** This addresses the following vulnerability: [GHSA-hrxh-6v49-42gf](https://osv.dev/vulnerability/GHSA-hrxh-6v49-42gf) | | **N/A** | **Security fixes for apigee-operators.** This addresses the following vulnerabilities: [CVE-2026-33818](https://nvd.nist.gov/vuln/detail/CVE-2026-33818) [CVE-2026-39821](https://nvd.nist.gov/vuln/detail/CVE-2026-39821) [CVE-2026-56853](https://nvd.nist.gov/vuln/detail/CVE-2026-56853) [CVE-2026-56858](https://nvd.nist.gov/vuln/detail/CVE-2026-56858) [CVE-2026-56859](https://nvd.nist.gov/vuln/detail/CVE-2026-56859) [CVE-2026-56860](https://nvd.nist.gov/vuln/detail/CVE-2026-56860) [CVE-2026-56862](https://nvd.nist.gov/vuln/detail/CVE-2026-56862) [CVE-2026-56864](https://nvd.nist.gov/vuln/detail/CVE-2026-56864) [CVE-2026-56865](https://nvd.nist.gov/vuln/detail/CVE-2026-56865) [CVE-2026-84303](https://nvd.nist.gov/vuln/detail/CVE-2026-84303) [CVE-2026-84304](https://nvd.nist.gov/vuln/detail/CVE-2026-84304) [CVE-2026-84445](https://nvd.nist.gov/vuln/detail/CVE-2026-84445) [GHSA-hrxh-6v49-42gf](https://osv.dev/vulnerability/GHSA-hrxh-6v49-42gf) [GHSA-w67g-5rqw-f597](https://osv.dev/vulnerability/GHSA-w67g-5rqw-f597) | | **N/A** | **Security fixes for apigee-prom-prometheus.** This addresses the following vulnerabilities: [CVE-2026-33818](https://nvd.nist.gov/vuln/detail/CVE-2026-33818) [CVE-2026-39821](https://nvd.nist.gov/vuln/detail/CVE-2026-39821) [CVE-2026-46600](https://nvd.nist.gov/vuln/detail/CVE-2026-46600) [CVE-2026-56853](https://nvd.nist.gov/vuln/detail/CVE-2026-56853) [CVE-2026-56858](https://nvd.nist.gov/vuln/detail/CVE-2026-56858) [CVE-2026-56859](https://nvd.nist.gov/vuln/detail/CVE-2026-56859) [CVE-2026-56860](https://nvd.nist.gov/vuln/detail/CVE-2026-56860) [CVE-2026-56862](https://nvd.nist.gov/vuln/detail/CVE-2026-56862) [CVE-2026-56864](https://nvd.nist.gov/vuln/detail/CVE-2026-56864) [CVE-2026-56865](https://nvd.nist.gov/vuln/detail/CVE-2026-56865) | | **N/A** | **Security fixes for apigee-prometheus-adapter.** This addresses the following vulnerabilities: [CVE-2026-33818](https://nvd.nist.gov/vuln/detail/CVE-2026-33818) [CVE-2026-39821](https://nvd.nist.gov/vuln/detail/CVE-2026-39821) [CVE-2026-46600](https://nvd.nist.gov/vuln/detail/CVE-2026-46600) [CVE-2026-56853](https://nvd.nist.gov/vuln/detail/CVE-2026-56853) [CVE-2026-56858](https://nvd.nist.gov/vuln/detail/CVE-2026-56858) [CVE-2026-56859](https://nvd.nist.gov/vuln/detail/CVE-2026-56859) [CVE-2026-56860](https://nvd.nist.gov/vuln/detail/CVE-2026-56860) [CVE-2026-56862](https://nvd.nist.gov/vuln/detail/CVE-2026-56862) [CVE-2026-56864](https://nvd.nist.gov/vuln/detail/CVE-2026-56864) [CVE-2026-56865](https://nvd.nist.gov/vuln/detail/CVE-2026-56865) [CVE-2026-84303](https://nvd.nist.gov/vuln/detail/CVE-2026-84303) [CVE-2026-84304](https://nvd.nist.gov/vuln/detail/CVE-2026-84304) [CVE-2026-84445](https://nvd.nist.gov/vuln/detail/CVE-2026-84445) [GHSA-hrxh-6v49-42gf](https://osv.dev/vulnerability/GHSA-hrxh-6v49-42gf) | | **N/A** | **Security fixes for apigee-redis.** This addresses the following vulnerabilities: [CVE-2026-33818](https://nvd.nist.gov/vuln/detail/CVE-2026-33818) [CVE-2026-39821](https://nvd.nist.gov/vuln/detail/CVE-2026-39821) [CVE-2026-46600](https://nvd.nist.gov/vuln/detail/CVE-2026-46600) [CVE-2026-56853](https://nvd.nist.gov/vuln/detail/CVE-2026-56853) [CVE-2026-56858](https://nvd.nist.gov/vuln/detail/CVE-2026-56858) [CVE-2026-56859](https://nvd.nist.gov/vuln/detail/CVE-2026-56859) [CVE-2026-56860](https://nvd.nist.gov/vuln/detail/CVE-2026-56860) [CVE-2026-56862](https://nvd.nist.gov/vuln/detail/CVE-2026-56862) [CVE-2026-56864](https://nvd.nist.gov/vuln/detail/CVE-2026-56864) [CVE-2026-56865](https://nvd.nist.gov/vuln/detail/CVE-2026-56865) | | **N/A** | **Security fixes for apigee-runtime.** This addresses the following vulnerabilities: [CVE-2026-55831](https://nvd.nist.gov/vuln/detail/CVE-2026-55831) [CVE-2026-55833](https://nvd.nist.gov/vuln/detail/CVE-2026-55833) [CVE-2026-56745](https://nvd.nist.gov/vuln/detail/CVE-2026-56745) [CVE-2026-56746](https://nvd.nist.gov/vuln/detail/CVE-2026-56746) [CVE-2026-56819](https://nvd.nist.gov/vuln/detail/CVE-2026-56819) [CVE-2026-59898](https://nvd.nist.gov/vuln/detail/CVE-2026-59898) [CVE-2026-59899](https://nvd.nist.gov/vuln/detail/CVE-2026-59899) [CVE-2026-59900](https://nvd.nist.gov/vuln/detail/CVE-2026-59900) [CVE-2026-59901](https://nvd.nist.gov/vuln/detail/CVE-2026-59901) [CVE-2026-59903](https://nvd.nist.gov/vuln/detail/CVE-2026-59903) [CVE-2026-59921](https://nvd.nist.gov/vuln/detail/CVE-2026-59921) [CVE-2026-73508](https://nvd.nist.gov/vuln/detail/CVE-2026-73508) [CVE-2026-75595](https://nvd.nist.gov/vuln/detail/CVE-2026-75595) [CVE-2026-75596](https://nvd.nist.gov/vuln/detail/CVE-2026-75596) | | **N/A** | **Security fixes for apigee-synchronizer.** This addresses the following vulnerabilities: [CVE-2026-55831](https://nvd.nist.gov/vuln/detail/CVE-2026-55831) [CVE-2026-55833](https://nvd.nist.gov/vuln/detail/CVE-2026-55833) [CVE-2026-56745](https://nvd.nist.gov/vuln/detail/CVE-2026-56745) [CVE-2026-56746](https://nvd.nist.gov/vuln/detail/CVE-2026-56746) [CVE-2026-56819](https://nvd.nist.gov/vuln/detail/CVE-2026-56819) [CVE-2026-59898](https://nvd.nist.gov/vuln/detail/CVE-2026-59898) [CVE-2026-59899](https://nvd.nist.gov/vuln/detail/CVE-2026-59899) [CVE-2026-59900](https://nvd.nist.gov/vuln/detail/CVE-2026-59900) [CVE-2026-59901](https://nvd.nist.gov/vuln/detail/CVE-2026-59901) [CVE-2026-59903](https://nvd.nist.gov/vuln/detail/CVE-2026-59903) [CVE-2026-59921](https://nvd.nist.gov/vuln/detail/CVE-2026-59921) [CVE-2026-73508](https://nvd.nist.gov/vuln/detail/CVE-2026-73508) [CVE-2026-75595](https://nvd.nist.gov/vuln/detail/CVE-2026-75595) [CVE-2026-75596](https://nvd.nist.gov/vuln/detail/CVE-2026-75596) | | **N/A** | **Security fixes for apigee-watcher.** This addresses the following vulnerabilities: [CVE-2026-33818](https://nvd.nist.gov/vuln/detail/CVE-2026-33818) [CVE-2026-39821](https://nvd.nist.gov/vuln/detail/CVE-2026-39821) [CVE-2026-56853](https://nvd.nist.gov/vuln/detail/CVE-2026-56853) [CVE-2026-56858](https://nvd.nist.gov/vuln/detail/CVE-2026-56858) [CVE-2026-56859](https://nvd.nist.gov/vuln/detail/CVE-2026-56859) [CVE-2026-56860](https://nvd.nist.gov/vuln/detail/CVE-2026-56860) [CVE-2026-56862](https://nvd.nist.gov/vuln/detail/CVE-2026-56862) [CVE-2026-56864](https://nvd.nist.gov/vuln/detail/CVE-2026-56864) [CVE-2026-56865](https://nvd.nist.gov/vuln/detail/CVE-2026-56865) [CVE-2026-84303](https://nvd.nist.gov/vuln/detail/CVE-2026-84303) [CVE-2026-84304](https://nvd.nist.gov/vuln/detail/CVE-2026-84304) [CVE-2026-84445](https://nvd.nist.gov/vuln/detail/CVE-2026-84445) [GHSA-hrxh-6v49-42gf](https://osv.dev/vulnerability/GHSA-hrxh-6v49-42gf) |