CGA-w52c-j6q8-cf23

Published

Last updated

Package

bank-vaults

RepositoryWolfi

Latest Update

Pending upstream fix

Aliases

Severity

4.3

Medium

CVSS V3

Status

Pending upstream fix

Impact

There is no fix for dependency gopkg.in/square/go-jose.v2 and a fix for this CVE would need code changes to replace the affected dependendency.

Status

Under investigation

Status

Fixed

Fixed version

1.20.4-r8

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™