Closed
Description
Hello!
I've been releasing the latest tag on Snowflake (SPCS) and have recently seen that pgvector has been flagged as having CVE-2023-24538.
Seems to be a super old CVE too. Any chance an update might be planned with updated dependencies? I've sent an email to the listed address on the Security tab too. Felt it was acceptable to share in an issue as they're so old.
EDIT: After scanning the image further, these vulnerabilities are present:
✗ CRITICAL CVE-2024-24790
https://scout.docker.com/v/CVE-2024-24790?s=golang&n=stdlib&t=golang&vr=%3C1.21.11
Affected range : <1.21.11
Fixed version : 1.21.11
✗ CRITICAL CVE-2023-24540
https://scout.docker.com/v/CVE-2023-24540?s=golang&n=stdlib&t=golang&vr=%3C1.19.9
Affected range : <1.19.9
Fixed version : 1.19.9
✗ CRITICAL CVE-2023-24538
https://scout.docker.com/v/CVE-2023-24538?s=golang&n=stdlib&t=golang&vr=%3C1.19.8
Affected range : <1.19.8
Fixed version : 1.19.8
Metadata
Metadata
Assignees
Labels
No labels