/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-8phv-885w-h3qw

Published

Last updated

https://images.chainguard.dev/security/CGA-8phv-885w-h3qw
Package

k8ssandra-client

RepositoryWolfi
Latest Update
Pending upstream fix
Aliases
  • CVE-2025-32386
  • GHSA-4hfp-h4cw-hj8p

Severity

6.5

Medium

CVSS V3

References

  • https://nvd.nist.gov/vuln/detail/CVE-2025-32386
  • https://github.com/advisories/GHSA-4hfp-h4cw-hj8p

Updates

Status

Pending upstream fix

Impact

K8ssandra-client 0.6.4 depends on Helm v3.14.2 https://github.com/k8ssandra/k8ssandra-client/blob/837b13f687e28c2e2188171bbb9dea26f70c2bbe/go.mod\#L25 - Upgrading to Helm v3.17.3, which addresses this vulnerability, causes build failures due to API incompatibilities. Upstream changes are required to ensure compatibility with the newer Helm version.

Status

Under investigation

The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing

Solutions

FedRAMPPCI DSSCMMC 2.0Golden ImagesCVE RemediationPublic Sector

Customers

Customer StoriesChainguard Reviews

Resources

Events & WebinarsSupply Chain Security 101Chainguard CoursesDocumentationTrust CenterChainguard Slack Community

Company

About UsBlogPartnersNewsroomCareersLegal