# Access, Collection and Execution node operators please upgrade to v0.31.21

**URL:** <https://forum.flow.com/t/access-collection-and-execution-node-operators-please-upgrade-to-v0-31-21/5285>\
**Category:** Node Operations\
**Created:** [October 13, 2023, 4:32pm UTC](https://forum.flow.com/t/access-collection-and-execution-node-operators-please-upgrade-to-v0-31-21/5285 "2023-10-13T16:32:51Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![vishal](https://avatars.discourse-cdn.com/v4/letter/v/49beb7/32.png) [@vishal](https://forum.flow.com/u/vishal)\
**Post date:** [October 13, 2023, 4:32pm UTC](https://forum.flow.com/t/access-collection-and-execution-node-operators-please-upgrade-to-v0-31-21/5285/1 "2023-10-13T16:32:51Z")

</div>

Hello Access, Collection and Execution node operators,

Please upgrade your Access, Collection and Execution node to `v0.31.21` (alternatively, `v0.31.21-without-netgo`)

_Do not delete the data folder_

The v0.31.21 release addresses the CVE: [cve-website](https://www.cve.org/CVERecord?id=CVE-2023-44487) for the HTTP/2 protocol. This release includes changes to the gRPC server to address the vulnerability on the Access, Collection, and Execution nodes.

Due to Go standard library dependencies, the **REST** & **gRPC-web** servers on Access Nodes cannot be patched at this time. Hence, if you are running an access node, we additionally recommend that you leverage an up-to-date proxy to protect the REST & gRPC-web servers from this vulnerability.

We will have a fully patched solution in the upcoming network upgrade (spork) on November 8th.

Thank you,  
Flow Foundation