istio-pilot-agent-fips-1.19
Chainguard
6.1
CVSS CVSS_V3
Status
Justification
Impact
Prometheus ships a Go (Golang) library with a versioning scheme that follows the 0.x format. However, the Prometheus application itself uses a versioning scheme based on 1.x, 2.x, etc. The vulnerability identified in CVE-2019-3826 is specifically associated with the Prometheus application, not the Golang library.
Status
Justification
Impact
Prometheus version 0.45 is actually 2.45 which is newer than the fixed version 2.7.1