Status
Impact
This vulnerability affects github.com/anchore/grype v0.95.0, a transitive dependency brought in via k9s. Upstream zarf maintainers need to review and resolve PR https://github.com/zarf-dev/zarf/pull/4201 as a prerequisite for enabling the k9s version bump. This is also dependent on a release of k9s being cut that contains the grype fix version. The fix has been merged into k9s main at https://github.com/derailed/k9s/commit/045c46bb8e4c015c59b6101ba9a9cfb5b43360f6
Status