kubernetes-dns-node-cache-1.17
Chainguard
Status
Impact
Bumping the version of gRPC is not possible for this pinned package. This package is locked to 1.8.x. Upgrading the version of gRPC required upstream to fork SkyDNS in order to fix a dependency conflict (see https://github.com/kubernetes/dns/pull/551). Upgrade to a more recent version of this package to resolve this vulnerability.
Status
Impact
govulncheck confirms the affected symbol is present.