/

Directory Security Advisories Pricing

Security Advisories

CGA-2mvr-xmqh-6wfh

Published

Last updated

https://images.chainguard.dev/security/CGA-2mvr-xmqh-6wfh

Package

nemo

Repository

Chainguard

Latest Update

Pending upstream fix

Aliases

Severity

5.3

Medium

CVSS V3

References

Updates

Status

Pending upstream fix

Impact

go/crypto is pulled into NeMo via the wandb dependency, where the most recent release uses only crypto v0.43.0[1]. [1] https://github.com/wandb/wandb/blob/v0.23.0/core/go.mod

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

© 2025 Chainguard. All Rights Reserved.