/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-r7mp-c398-8gm9

Published

Last updated

https://images.chainguard.dev/security/CGA-r7mp-c398-8gm9
Package

opentelemetry-collector-fips

Repository

Chainguard

Latest Update
Fixed
Fixed Version

0.115.0-r1

Aliases
  • CVE-2024-45337
  • GHSA-v778-237x-gjrc

Severity

9.1

Critical

CVSS CVSS_V3

References

  • https://nvd.nist.gov/vuln/detail/CVE-2024-45337

Updates

Status

Fixed

Fixed version

0.115.0-r1

Status

Pending upstream fix

Impact

The project uses the OCB builder to create the OpenTelemetry binary, which adds dependencies at build time. These dependencies are managed by the OCB, leaving us with no control over them. Resolving this vulnerability will require upstream changes in a future release.

Status

Under investigation


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing