CGA-9qpx-jrv5-q2xc

The github.com/mholt/archiver/v3 package is an archived project that has been replaced by https://github.com/mholt/archives. Upstream maintainers need to upgrade package.

Unable to use govulncheck to triage this advisory because the vulnerability was not found in the Go vuln DB. Treating as a true positive since we can't confirm this is a false positive.