{"id":"CGA-3vm4-437r-r5fc","modified":"2026-09-07T01:22:50.051617893Z","published":"2026-06-10T20:48:22Z","upstream":["GHSA-2w8w-qhg4-f78j"],"references":[{"type":"WEB","url":"https://github.com/jaegertracing/jaeger-ui/security/advisories/GHSA-vv24-rm95-q56r"},{"type":"WEB","url":"https://github.com/jaegertracing/jaeger/security/advisories/GHSA-2w8w-qhg4-f78j"},{"type":"PACKAGE","url":"https://github.com/jaegertracing/jaeger"},{"type":"WEB","url":"https://github.com/jaegertracing/jaeger-ui/blob/main/packages/jaeger-ui/src/components/TracePage/TraceTimelineViewer/SpanDetail/KeyValuesTable.tsx#L49"}],"affected":[{"package":{"name":"plutono-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/plutono-fips?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"ecosystem_specific":{"components":[{"latest_event_status":"false_positive_determination","latest_event_timestamp":"2026-06-25T10:09:53Z","component_name":"github.com/jaegertracing/jaeger","component_version":"v1.22.1-0.20210304164023-2fff3ca58910","component_type":"go-module","component_location":"/usr/bin/plutono-server","component_purl":"pkg:golang/github.com/jaegertracing/jaeger@v1.22.1-0.20210304164023-2fff3ca58910"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3vm4-437r-r5fc.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}]}