/

Directory Security Advisories Pricing

Security Advisories

CGA-6qcp-jpfx-45rr

Published

Last updated

https://images.chainguard.dev/security/CGA-6qcp-jpfx-45rr

Package

kubevela-fips

Repository

Chainguard

Latest Update

Pending upstream fix

Aliases

Severity

8.5

High

CVSS V3

References

Updates

Status

Pending upstream fix

Impact

Kubevela 1.10.3 depends on Helm v3.14.4 https://github.com/kubevela/kubevela/blob/ef9b6f3cc10a4b6871b5698ca41fea3f6b3bcaec/go.mod\#L80 - Upgrading to Helm v3.18.4 which addresses this vulnerability, causes build failures due to API incompatibilities. Upstream changes are required to ensure compatibility with the newer Helm version.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

© 2025 Chainguard. All Rights Reserved.