> For the complete documentation index, see [llms.txt](https://documentation.alluxio.io/k8s-operator-en/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://documentation.alluxio.io/k8s-operator-en/release-notes/operator-3-7-6.md).

# Alluxio Kubernetes Operator 3.7.6 Release Notes

## Summary

### Bug Fixes

* **HTTP/2 request handling** fixes a fragmentation flaw (`GHSA-vp52-pcj8-j9qc`) in which a peer sending heavily fragmented frames could drive a process into an out-of-memory kill. The fix covers both the CSI driver's gRPC services and the operator's gRPC clients, including its etcd connection. If you run the operator with untrusted network peers able to reach these endpoints, upgrade to pick up this fix.

## Breaking Changes

No breaking changes in this release.

## Upgrade Notes

No migration steps are required for this release.