The Golang team released new versions of the Go packages including security fixes (CVE-2021-33196 and CVE-2021-39293). You can get more information from here:
https://groups.google.com/g/golang-announce/c/dx9d7IOseHw
I found that one of the binaries (anthoscli) inside the package you provide (https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-sdk-VERSION-linux-x86_64.tar.gz) is a go binary. Could you please confirm if the binary is affected by this security vulnerability and update the package to use this new version of Go?
Note: I also found that the CLI is no longer supported (https://cloud.google.com/service-mesh/v1.5/docs/install-anthos-cli). If that's the case, could you please work on removing it from the Google Cloud SDK package?
Thanks