Vulnerabilities found for openfga:1.8.9-22.04_11

[ROCKsBot]

Vulnerabilities found for openfga:1.8.9-22.04_11

ID	Target	Severity	Package
CVE-2025-22874	/bin/grpc_health_probe	HIGH	stdlib
CVE-2025-22874	/bin/openfga	HIGH	stdlib

Affected tracks:

• 1-22.04_beta
• 1-22.04_candidate
• 1-22.04_edge
• 1-22.04_stable

Details: https://github.com/canonical/oci-factory/actions/runs/15647019716

[github-actions]

CVE issue checker

Applied labels: bug

Workflow: CVEs checker

[syncronize-issues-to-jira]

Thank you for reporting your feedback to us!

The internal ticket has been created: https://warthogs.atlassian.net/browse/IAM-1582.

This message was autogenerated

[shipperizer]

false positive

shipperizer in ~/shipperizer/kratos on tags/v1.3.1 ● ● λ govulncheck ./...                
=== Symbol Results ===

Vulnerability #1: GO-2025-3372
    Vulnerability when creating log files in github.com/golang/glog
  More info: https://pkg.go.dev/vuln/GO-2025-3372
  Module: github.com/golang/glog
    Found in: github.com/golang/glog@v1.2.1
    Fixed in: github.com/golang/glog@v1.2.4
    Example traces found:
      #1: driver/registry_default.go:874:33: driver.RegistryDefault.JWKSFetcher calls ristretto.NewCache, which eventually calls glog.Fatal

Your code is affected by 1 vulnerability from 1 module.
This scan also found 3 vulnerabilities in packages you import and 3
vulnerabilities in modules you require, but your code doesn't appear to call
these vulnerabilities.
Use '-show verbose' for more details.
No vulnerabilities found.