/

Directory Security Advisories Pricing

Security Advisories

CGA-qhh5-4cfr-pfp4

Published

Last updated

https://images.chainguard.dev/security/CGA-qhh5-4cfr-pfp4

Package

temporal-ui-server

RepositoryWolfi

Latest Update

Not affected

Aliases

Severity

7.5

High

CVSS V3

References

Updates

Status

Not affected

Justification

Vulnerable code not in execute path

Impact

The Function parse.ParseUnverified which is the vulnerable function for this CVE, is not used in any of the temporal-ui-server code.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

© 2025 Chainguard. All Rights Reserved.