onfluent-common-docker/GHSA-78wr-2p64-hpwj advisory update (#8721)

wolfi-dev · Oct 21, 2024 · 8c6f030 · 8c6f030
1 parent 9aa0a3a
commit 8c6f030
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/confluent-common-docker.advisories.yaml b/confluent-common-docker.advisories.yaml
@@ -83,6 +83,10 @@ advisories:
             componentType: java-archive
             componentLocation: /usr/share/java/cp-base-new/docker-utils-jar-with-dependencies.jar
             scanner: grype
+      - timestamp: 2024-10-21T02:28:15Z
+        type: pending-upstream-fix
+        data:
+          note: The commons-io dependency is a transitive dependency that is being brought in under docker-utils-jar-with-dependencies.jar and this must be updated by upstream maintainers.
 
   - id: CGA-gw4m-4mj9-6g69
     aliases: