CGA-wcfm-5g6h-5q26

Published

Last updated

https://images.chainguard.dev/security/CGA-wcfm-5g6h-5q26

Package

mattermost-9

RepositoryWolfi

Latest Update

Not affected

Aliases

CVE-2023-50333
GHSA-9w97-9rqx-8v4j

Severity

4.3

Medium

CVSS CVSS_V3

References

https://nvd.nist.gov/vuln/detail/CVE-2023-50333
https://github.com/advisories/GHSA-9w97-9rqx-8v4j

Updates

Status

Not affected

Justification

Component not present

Impact

This vulnerability affects versions for v8.1.x. Since we are building v9.x, we suspect this is a false positive attributed to this Syft bug: https://github.com/anchore/syft/issues/2980

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CGA-wcfm-5g6h-5q26

Severity

References

Updates

Product

Solutions

Customers

Resources

Company