CGA-xx32-jqfw-xx2j

Published

Last updated

Package

promxy-fips

Repository

Chainguard

Latest Update

Not affected

Aliases

Severity

5.4

Medium

CVSS V3

Status

Not affected

Justification

Vulnerable code not in execute path

Impact

alertmanager GO-2023-2020 code is not called by promxy-fips, current package version unaffected.

Status

Pending upstream fix

Impact

Security advisory reported to upstream

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™