add GHSA-c5q2-7r4c-mv6g for minio-fips pending fix (#5180)

wolfi-dev · Jun 5, 2024 · 98cf117 · 98cf117
1 parent 2e9ce7d
commit 98cf117
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/minio.advisories.yaml b/minio.advisories.yaml
@@ -187,6 +187,10 @@ advisories:
             componentType: go-module
             componentLocation: /usr/bin/minio
             scanner: grype
+      - timestamp: 2024-06-05T11:15:16Z
+        type: pending-upstream-fix
+        data:
+          note: There is no fix for dependency gopkg.in/square/go-jose.v2 and to fix that need code changes to replace the affected dependency.
 
   - id: CGA-hccr-vqh4-jpw8
     aliases: