CGA-q9qr-vfff-j8j4

Published

Last updated

Package

sdp-k8s-injector

RepositoryWolfi

Latest Update

Pending upstream fix

Aliases

Severity

Unknown

Status

Pending upstream fix

Impact

The vulnerable ring version 0.16.20 is a transitive dependency. Upstream maintainers need to upgrade packages to remove this older version of ring

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™