add GHSA-c5q2-7r4c-mv6g for temporal-ui-server pending fix (#5178)

wolfi-dev · Jun 5, 2024 · e515885 · e515885
1 parent 30c8278
commit e515885
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/temporal-ui-server.advisories.yaml b/temporal-ui-server.advisories.yaml
@@ -92,6 +92,10 @@ advisories:
             componentType: go-module
             componentLocation: /usr/bin/ui-server
             scanner: grype
+      - timestamp: 2024-06-05T11:10:51Z
+        type: pending-upstream-fix
+        data:
+          note: There is no fix for dependency gopkg.in/square/go-jose.v2 and to fix that need code changes to replace the affected dependency.
 
   - id: CGA-r649-px6r-gmxm
     aliases: