CGA-hjjp-j4vg-j855

Published

Last updated

https://images.chainguard.dev/security/CGA-hjjp-j4vg-j855

Package

nodejs-20

RepositoryWolfi

Latest Update

Pending upstream fix

Aliases

CVE-2024-7592
GHSA-7pwv-g7hj-39pr

Severity

7.5

High

CVSS CVSS_V3

References

https://nvd.nist.gov/vuln/detail/CVE-2024-7592
https://github.com/advisories/GHSA-7pwv-g7hj-39pr

Updates

Status

Pending upstream fix

Impact

This CVE relates to python 3.11, which is only included in the nodejs -dev image variant. A fix has been proposed upstream but it has yet to be approved or merged. More information can be found here: https://github.com/python/cpython/pull/123105'

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CGA-hjjp-j4vg-j855

Severity

References

Updates

Product

Solutions

Customers

Resources

Company