CGA-pw83-qvv4-hv4j

Published

Last updated

Package

temporal

RepositoryWolfi

Latest Update

Not affected

Aliases

Severity

7.5

High

CVSS V3

Status

Not affected

Justification

Vulnerable code not in execute path

Impact

The Function parse.ParseUnverified which is the vulnerable function for this CVE, is not used in any of the temporal code.

Status

Under investigation

Status

Fixed

Fixed version

1.3.0-r4

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™