/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-h9hf-9x4r-5fhc

Published

Last updated

https://images.chainguard.dev/security/CGA-h9hf-9x4r-5fhc
Package

zarf

RepositoryWolfi
Latest Update
Pending upstream fix
Aliases
  • CVE-2025-65965
  • GHSA-6gxw-85q2-q646

Severity

Unknown

References

  • https://nvd.nist.gov/vuln/detail/CVE-2025-65965

Updates

Status

Pending upstream fix

Impact

This vulnerability affects github.com/anchore/grype v0.95.0, a transitive dependency brought in via k9s. Upstream zarf maintainers need to review and resolve PR https://github.com/zarf-dev/zarf/pull/4201 as a prerequisite for enabling the k9s version bump. This is also dependent on a release of k9s being cut that contains the grype fix version. The fix has been merged into k9s main at https://github.com/derailed/k9s/commit/045c46bb8e4c015c59b6101ba9a9cfb5b43360f6

Status

Under investigation


The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing