CGA-cjhp-29gh-4ww9

Published

Last updated

https://images.chainguard.dev/security/CGA-cjhp-29gh-4ww9

Package

caddy-fips

Repository

Chainguard

Latest Update

Not affected

Aliases

CVE-2022-28923
GHSA-qpm3-vr34-h8w8

Severity

6.1

Medium

CVSS V3

References

https://nvd.nist.gov/vuln/detail/CVE-2022-28923
https://github.com/advisories/GHSA-qpm3-vr34-h8w8

Updates

Status

Not affected

Justification

Vulnerable code not present

Impact

The CVE-2022-28923 fix is present in this package v2.7.6. The httpredirectlistener.go file of the source code contains the necessary code to handle HTTP to HTTPS redirection, mitigating the open redirection vulnerability.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CGA-cjhp-29gh-4ww9

Severity

References

Updates

The trusted source for open source

Product

Solutions

Customers

Resources

Company