CGA-hmfp-f3v3-528v

Published

Last updated

Package

sops

RepositoryWolfi

Latest Update

Pending upstream fix

Aliases

Severity

4.3

Medium

CVSS CVSS_V3

Status

Pending upstream fix

Impact

There is no fix for dependency gopkg.in/square/go-jose.v2 and to fix that need code changes to replace the affected dependency.

Status

Under investigation

Status

Fixed

Fixed version

3.8.1-r4

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™