add GHSA-c5q2-7r4c-mv6g for ipfs pending (#5161)

wolfi-dev · Jun 4, 2024 · 34b0e12 · 34b0e12
1 parent 5a5e8a8
commit 34b0e12
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/ipfs.advisories.yaml b/ipfs.advisories.yaml
@@ -164,6 +164,10 @@ advisories:
             componentType: go-module
             componentLocation: /usr/bin/ipfs
             scanner: grype
+      - timestamp: 2024-06-04T13:20:07Z
+        type: pending-upstream-fix
+        data:
+          note: There is no fix for dependency gopkg.in/square/go-jose.v2 and to fix that need code changes to replace the affected dependency.
 
   - id: CGA-xhr8-33jp-pc32
     aliases: