CGA-9vh4-q6hh-jvwr

Published

Last updated

Package

grafana-alloy-fips

Repository

Chainguard

Latest Update

Fixed

Fixed Version

1.3.0-r0

Aliases

Severity

9.9

Critical

CVSS V3

Status

Fixed

Fixed version

1.3.0-r0

Status

Pending upstream fix

Impact

Upgrading the docker dependency requires substantial code changes, though these changes have been made upstream in https://github.com/grafana/alloy/pull/1362. As per https://github.com/grafana/alloy/issues/1404, we are waiting for upstream to cut a new release.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™