Directory Security Advisories Pricing

/

Security Advisories

CGA-8wg7-v7wx-4j5v

Published

Last updated

https://images.chainguard.dev/security/CGA-8wg7-v7wx-4j5v

Package

garage-2

Repository

Chainguard

Latest Update

Pending upstream fix

Aliases

Severity

5.9

Medium

CVSS V3

References

Updates

Status

Pending upstream fix

Impact

Garage depends on opentelemetry-prometheus which pulls in the unmaintained protobuf crate. For more information: https://git.deuxfleurs.fr/Deuxfleurs/garage/issues/1245

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

© 2025 Chainguard. All Rights Reserved.