CGA-m555-hgfj-qhhh

Published

Last updated

https://images.chainguard.dev/security/CGA-m555-hgfj-qhhh

Package

py3-pip

RepositoryWolfi

Latest Update

Not affected

Aliases

Severity

Unknown

References

Updates

Status

Not affected

Justification

Vulnerable code not present

Impact

CVE-2025-8869 is patched via cherry-picks from upstream.

Status

Pending upstream fix

Impact

Upstream has released fixes that have landed into their main branch. We are now pending for upstream to cut a release with 25.3 which will have the fixes for this vulnerability.

Status

Under investigation

Status

Fixed

Fixed version

25.2-r2

Status

Pending upstream fix

Impact

Upstream has released fixes that have landed into their main branch. We are now pending for upstream to cut a release with 25.3 which will have the fixes for this vulnerability.

Status

Under investigation

Status

Fixed

Fixed version

25.2-r1

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™