VDB

CGA-2x8c-j6qq-9ch3

CGA-2x8c-j6qq-9ch3 PUBLISHED

Record from OSV · Published January 29, 2026

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
opentofu-1.7-local-provider-configChainguard1.7.10-r6
snyk-cliChainguard1.1291.1-r3
opentofu-1.7Chainguard1.7.10-r6
grypeWolfi0.79.1-r1
datadog-agent-fakeintakeWolfi7.54.1-r1
k9sWolfi0.32.5-r1
conftestWolfi0.53.0-r1
tflint-compatChainguard0.51.1-r2
kotsChainguard1.109.14-r1
datadog-agent-core-integrationsWolfi7.54.1-r1
kots-compatChainguard1.109.14-r1
trivyChainguard0.52.2-r1

71 more packages have a fixed version. See every fix in Lookup.

Affected products

VendorProductVersions
Chainguardopentofu-1.7-local-provider-config0
Chainguardsnyk-cli0
Chainguardopentofu-1.70
Wolfigrype0
Wolfidatadog-agent-fakeintake0
Wolfik9s0
Wolficonftest0
Chainguardtflint-compat0
Chainguardkots0
Wolfidatadog-agent-core-integrations0
Chainguardkots-compat0
Chainguardtrivy0
Chainguardtfsec0
Wolfiopentofu-compat0
Chainguarddatadog-agent-oci-compat-fips0
Chainguarddatadog-cluster-agent0
Chainguardzarf0
Wolfidatadog-agent-oci-compat0
Chainguardopentofu-1.7-compat0
Chainguardopentofu-local-provider-config0

…and 63 more

Timeline

  • Jan 29, 2026 CVE Published
  • Feb 4, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CGA-2x8c-j6qq-9ch3
vulnetix vdb fixes CGA-2x8c-j6qq-9ch3

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CGA-2x8c-j6qq-9ch3/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›