CGA-f2pv-x2gc-9m4c

Published

Last updated

https://images.chainguard.dev/security/CGA-f2pv-x2gc-9m4c

Package

mattermost-9

RepositoryWolfi

Latest Update

Not affected

Aliases

CVE-2023-48369
GHSA-3487-3j7c-7gwj

Severity

5.3

Medium

CVSS CVSS_V3

References

https://nvd.nist.gov/vuln/detail/CVE-2023-48369
https://github.com/advisories/GHSA-3487-3j7c-7gwj

Updates

Status

Not affected

Justification

Component not present

Impact

This vulnerability affects versions for v8.1.x. Since we are building v9.x, we suspect this is a false positive attributed to this Syft bug: https://github.com/anchore/syft/issues/2980

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CGA-f2pv-x2gc-9m4c

Severity

References

Updates

Product

Solutions

Customers

Resources

Company