CGA-pq95-x78h-qx9r

Published

Last updated

Package

request-1277

Repository

Chainguard

Latest Update

Fixed

Fixed Version

0.1.89-r0

Aliases

Severity

6.5

Medium

CVSS CVSS_V3

Status

Fixed

Fixed version

0.1.89-r0

Status

Pending upstream fix

Impact

To fix the CVE, we have to upgrade 'classgraph' to '4.8.112' or later but this fix will require some code changes on the upstream repository.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™