CGA-qp6c-xwwc-642h

This package is no longer supported upstream and has reached its end of life. A dependency upgrade to fix this vulnerability failed when building this package.

Unable to use govulncheck to triage this advisory because the vulnerability was not found in the Go vuln DB. Treating as a true positive since we can't confirm this is a false positive.