VDB
CGA-4h42-h3g6-cxx5
CGA-4h42-h3g6-cxx5
PUBLISHED
Record from OSV · Published January 31, 2026
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| scorecard | Wolfi | 5.4.0-r3 |
| cni-plugins-fips-main | Chainguard | 1.9.0-r1 |
| src | Wolfi | 6.12.0-r2 |
| ipfs-cluster-fips | Chainguard | 1.1.5-r1 |
| kubeflow-access-management | Chainguard | 1.10.0-r11 |
| gitlab-workhorse-ce-18.1 | Chainguard | 18.1.6-r4 |
| sbom-scorecard | Wolfi | 0.0.7-r26 |
| knative-eventing-fips-1.17-channel-dispatcher | Chainguard | 1.17.6-r8 |
| step-fips | Chainguard | 0.29.0-r3 |
| crossplane-provider-aws-dynamodb-fips | Chainguard | 2.3.0-r3 |
| tekton-pipelines-controller-1.0 | Chainguard | 1.0.0-r12 |
| calico-key-cert-provisioner-3.29 | Wolfi | 3.29.7-r5 |
88 more packages have a fixed version. See every fix in Lookup.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Wolfi | scorecard | 0 |
| Chainguard | cni-plugins-fips-main | 0 |
| Wolfi | src | 0 |
| Chainguard | ipfs-cluster-fips | 0 |
| Chainguard | kubeflow-access-management | 0 |
| Chainguard | gitlab-workhorse-ce-18.1 | 0 |
| Wolfi | sbom-scorecard | 0 |
| Chainguard | knative-eventing-fips-1.17-channel-dispatcher | 0 |
| Chainguard | step-fips | 0 |
| Chainguard | crossplane-provider-aws-dynamodb-fips | 0 |
| Chainguard | tekton-pipelines-controller-1.0 | 0 |
| Wolfi | calico-key-cert-provisioner-3.29 | 0 |
| Wolfi | kuma-cni-2.9 | 0 |
| Chainguard | net-kourier-fips-1.19 | 0 |
| Chainguard | kubernetes-dashboard-metrics-scraper | 0 |
| Wolfi | dkron | 0 |
| Chainguard | emqx-exporter-fips | 0 |
| Chainguard | yunikorn-web-fips | 0 |
| Wolfi | spire-server | 0 |
| Chainguard | linkerd2-cni-plugin | 0 |
…and 2008 more
Timeline
- Jan 31, 2026 CVE Published
- May 18, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CGA-4h42-h3g6-cxx5
vulnetix vdb fixes CGA-4h42-h3g6-cxx5Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CGA-4h42-h3g6-cxx5/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart