CGA-xxmx-4j5m-vgqj

Published

Last updated

https://images.chainguard.dev/security/CGA-xxmx-4j5m-vgqj

Package

eks-distro-fips-1.31

Repository

Chainguard

Latest Update

Pending upstream fix

Aliases

CVE-2024-28180
GHSA-c5q2-7r4c-mv6g

Severity

Unknown

References

https://nvd.nist.gov/vuln/detail/CVE-2024-28180
https://github.com/advisories/GHSA-c5q2-7r4c-mv6g

Updates

Status

Pending upstream fix

Impact

The dependency causing this CVE currently has no fix version yet. gopkg.in/square/go-jose.v2 @ v2.6.0 is the most recent version, this can be seen here: https://gopkg.in/square/go-jose.v2

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CGA-xxmx-4j5m-vgqj

Severity

References

Updates

Product

Solutions

Customers

Resources

Company