py3.10-vllm-cuda-11.8
Chainguard
5.3
CVSS V3
Status
Impact
The commons-io dependency that exists in the py3.10-vllm-cuda-11 package is brought in as transitive dependency from ray_dist.jar. This dependency is not able to be upgraded to a higher version and requires upstream maintainers to implement.
Status