Status
Impact
This vulnerability originates in golang.org/x/crypto. Updating the crypto package to v0.45.0 currently results in build failures. Upstream will need to introduce code changes alongside the version bump to fully remediate the issue. Although upstream has advanced to v0.40.0, they have not yet published a release that includes this update.
Status
Impact
Govulncheck found vulnerable symbols in Go binaries at the following locations: in gitness-3.3.0-r3.apk, at usr/bin/gitness, usr/bin/gitness.
Status