CGA-c8h6-cp5m-vqhq

This vulnerability is related to 'quic-go', one of the dependencies of the 'q' package. A fix is available, but requires upgrading 'quic-go' to 'v0.48.2'. Attempting to upgrade to this version results in build failures. Specifically, 'QuicConfig' may have been deprecated in favor of 'QUICConfig'. Attempts to patch the likely areas of the codebase were unsuccessful, and still resulted in build failures. Will require the upstream 'q' project to address in a future release.