I think you have fixed this in the code but maybe did not make the last release in Jan.
I found this using docker scout against the docker image
pkg:golang/github.com/cloudflare/circl@1.3.6
✗ HIGH GHSA-9763-4f94-gfch
https://scout.docker.com/v/GHSA-9763-4f94-gfch?s=github&n=circl&ns=github.com%2Fcloudflare&t=golang&vr=%3C1.3.7
Affected range : <1.3.7
Fixed version : 1.3.7
I think you have fixed this in the code but maybe did not make the last release in Jan.
I found this using
docker scout
against the docker imageJust a heads up