/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-4hrw-jc9c-g948

Published

Last updated

https://images.chainguard.dev/security/CGA-4hrw-jc9c-g948
Package

rancher-fleet

RepositoryWolfi
Latest Update
Not affected
Aliases
  • CVE-2025-1767
  • GHSA-3wgm-2gw2-vh5m

Severity

Unknown

References

  • https://nvd.nist.gov/vuln/detail/CVE-2025-1767
  • https://github.com/advisories/GHSA-3wgm-2gw2-vh5m

Updates

Status

Not affected

Justification

Vulnerable code not present

Impact

This vulnerability applies to the git-repo volume provisioner, not the k8s client itself.

Status

Pending upstream fix

Impact

This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node and there is no fixed version available yet.

Status

Under investigation

The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing

Solutions

FedRAMPPCI DSSGolden ImagesCVE RemediationPublic Sector

Customers

Customer StoriesChainguard Reviews

Resources

Events & WebinarsChainguard CoursesDocumentationTrust Center

Company

About UsBlogPartnersNewsroomCareersLegal