The packages below are or contain embedded packages that are vulnerable to CVE-2024-28180: - openSUSE:Factory/influxdb2 contains embedded package: gopkg.in/square/go-jose.v2 (2.5.1) Please consider version bumping or patching the affected dependencies. The listed codestreams are affected. All other codestreams should not be affected, but feel free to double-check. This is a auto-generated message, please reach out to the reporter directly if you think this is incorrect. No bug-owner found for these packages, if the assignation is not correct feel free to re-assign.