/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-7m2j-34vv-259p

Published

Last updated

https://images.chainguard.dev/security/CGA-7m2j-34vv-259p
Package

gatekeeper-3.12

RepositoryWolfi
Latest Update
Not affected
Aliases
  • CVE-2019-3826
  • GHSA-3m87-5598-2v4f

Severity

6.1

Medium

CVSS V3

References

  • https://nvd.nist.gov/vuln/detail/CVE-2019-3826
  • https://github.com/advisories/GHSA-3m87-5598-2v4f

Updates

Status

Not affected

Justification

Component not present

Impact

Prometheus ships a Go (Golang) library with a versioning scheme that follows the 0.x format. However, the Prometheus application itself uses a versioning scheme based on 1.x, 2.x, etc. The vulnerability identified in CVE-2019-3826 is specifically associated with the Prometheus application, not the Golang library.

Status

Not affected

Justification

Vulnerable code not in execute path

Impact

This CVE affects the Prometheus UI (Javascript) and not the Go code

Safe Source for Open Source™
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing

Solutions

FedRAMPPCI DSSGolden ImagesCVE RemediationPublic Sector

Customers

Customer StoriesChainguard Reviews

Resources

Events & WebinarsChainguard CoursesDocumentationTrust Center

Company

About UsBlogPartnersNewsroomCareersLegal