CGA-p4vf-8p39-99jw

Published

Last updated

https://images.chainguard.dev/security/CGA-p4vf-8p39-99jw

Package

kubernetes-1.30

RepositoryWolfi

Latest Update

Pending upstream fix

Aliases

CVE-2024-28180
GHSA-c5q2-7r4c-mv6g

Severity

4.3

Medium

CVSS V3

References

https://nvd.nist.gov/vuln/detail/CVE-2024-28180
https://github.com/advisories/GHSA-c5q2-7r4c-mv6g

Updates

Status

Pending upstream fix

Impact

The gopkg.in/square/go-jose.v2 dependency is archived and will not be fixed as can be seen here for the advisory database: https://github.com/advisories/GHSA-c5q2-7r4c-mv6g The upstream maintainers must implement the fix.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CGA-p4vf-8p39-99jw

Severity

References

Updates

Product

Solutions

Customers

Resources

Company