Status
Impact
Currently grafana-agent-operator is dependent on golang 1.22. There is work upstream to bump the golang version to 1.24, and we are pending for upstream to cut a version with the new golang version in order to fix this CVE. More information can be found here: https://github.com/grafana/agent/commit/1d3100817f6c84454ee9155c7bdfe6008dd15ef8
Status
Impact
Govulncheck found vulnerable symbols in Go binaries at the following locations: in grafana-agent-operator-0.44.2-r37.apk, at usr/bin/grafana-agent-operator, usr/bin/grafana-agent-operator.
Status