CGA-mh5p-7jgp-cwjj

Published

Last updated

https://images.chainguard.dev/security/CGA-mh5p-7jgp-cwjj

Package

loki-2.9

Repository

Chainguard

Latest Update

Pending upstream fix

Aliases

CVE-2024-41110
GHSA-v23v-6jw2-98fq

Severity

9.9

Critical

CVSS V3

References

https://nvd.nist.gov/vuln/detail/CVE-2024-41110
https://github.com/advisories/GHSA-v23v-6jw2-98fq

Updates

Status

Pending upstream fix

Impact

Updating github.com/docker/docker to the latest fixed version requires an update to github.com/grafana/dskit. However, this update introduces breaking changes to the codebase. To avoid these vulnerabilities, it is recommended to use Loki version 3.0.0 or later.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CGA-mh5p-7jgp-cwjj

Severity

References

Updates

The trusted source for open source

Product

Solutions

Customers

Resources

Company