CGA-j6qv-mgh9-jgmp

Published

Last updated

Package

kubernetes-csi-driver-nfs

RepositoryWolfi

Latest Update

Not affected

Aliases

Severity

Unknown

Status

Not affected

Justification

Vulnerable code cannot be controlled by adversary

Impact

This vulnerability affects versions <= v1.29.12. This vulnerability is limited to Windows hosts.

Status

Pending upstream fix

Impact

Upstream will have to update to a newer version of kubernetes go package. Attempted to update to 1.29.14 fails due to signature changes

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™