CGA-vfj7-4g4f-fh76

Published

Last updated

https://images.chainguard.dev/security/CGA-vfj7-4g4f-fh76

Package

mattermost-10.8

RepositoryWolfi

Latest Update

Pending upstream fix

Aliases

CVE-2024-0406
GHSA-rhh4-rh7c-7r5v

Severity

7.8

High

CVSS CVSS_V3

References

https://nvd.nist.gov/vuln/detail/CVE-2024-0406
https://github.com/advisories/GHSA-rhh4-rh7c-7r5v

Updates

Status

Pending upstream fix

Impact

The github.com/mholt/archiver/v3 package is an archived project that has been replaced by https://github.com/mholt/archives. Upstream maintainers need to upgrade package.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CGA-vfj7-4g4f-fh76

Severity

References

Updates

Product

Solutions

Customers

Resources

Company