CGA-222v-mfpx-cj35

Published

Last updated

Package

eks-distro-1.28

Repository

Chainguard

Latest Update

Pending upstream fix

Aliases

Severity

Unknown

Status

Pending upstream fix

Impact

There is no fix for dependency gopkg.in/square/go-jose.v2 and a fix for this CVE would need code changes to replace the affected dependendency.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™