Skip to content

Advisory-Template.md

Latest commit

 

History

History
35 lines (25 loc) · 1.32 KB

Advisory-Template.md

File metadata and controls

35 lines (25 loc) · 1.32 KB
Raw

Nightingale Advisories

-

Third-Party Package Updates in Nightingale - Month 2025

Advisory ID:
CVE ID: Multiple
Published: 2025-05-31
Last Update: 2025-05-31

Description

We have addressed multiple CVEs originating from third-party dependencies in Nightingale versions 1.1.20 and above, across arm64 and amd64 architectures for Windows, Linux, and macOS platforms. The following vulnerabilities were resolved as part of this release:

Package Remediation CVE Severity
lib1 Upgraded to v2.0 Multiple 1 Critical
lib2 Removed Multiple 1 Critical
  1. Removed the packages when building Nightingale from base image - ghcr.io/rajanagori/nightingale to remedy CVE-2024-XXXX, CVE-2024-YYYY and CVE-2024-ZZZZZ

Solution

Upgrade Nightingale to versions 1.1.XX, or higher.

Product Status

Release Name Base Version Affected Versions Fix Version
nightingale-go 1.1 1.1.0 to 1.1.XX 1.1.YY
nightingale-go 1.0 Affected Not Supported

Severity

For the CVEs in this list, we adopted the severity rating that the vendor published.