CGA-w3fp-c448-wrmr

Published

Last updated

Package

istio-fips-1.23

Repository

Chainguard

Latest Update

Pending upstream fix

Aliases

Severity

6.5

Medium

CVSS V3

Status

Pending upstream fix

Impact

Istio 1.23.6 depends on Helm v3.15.1 https://github.com/istio/istio/blob/6a112a28410654328342c68f82da48920e34f062/go.mod\#L100 - Upgrading to Helm v3.17.3, which addresses this vulnerability, causes build failures due to API incompatibilities. Upstream changes are required to ensure compatibility with the newer Helm version.

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™