VDB
CGA-6h4p-9v6j-g26c
CGA-6h4p-9v6j-g26c
PUBLISHED
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Chainguard | cosign | 0, 0, 0 |
| Chainguard | tekton-chains | 0, 0, 0 |
| Chainguard | sigstore-scaffolding-ctlog-createctconfig | 0, 0, 0 |
| Wolfi | sigstore-scaffolding-ctlog-createctconfig | 0, 0, 0 |
| Wolfi | slsa-verifier | 0, 0, 0 |
| Chainguard | gitsign-credential-cache | 0, 0, 0 |
| Chainguard | kyverno-policy-reporter-plugins-kyverno-fips | 0, 0, 0 |
| Wolfi | vexctl | 0, 0, 0 |
| Chainguard | flux-source-controller-fips | 0, 0, 0 |
| Wolfi | falcoctl | 0, 0, 0 |
| Chainguard | kots | 0, 0, 0 |
| Chainguard | slsa-verifier | 0, 0, 0 |
| Chainguard | kubescape | 0, 0, 0 |
| Wolfi | witness | 0, 0, 0 |
| Chainguard | sigstore-scaffolding-fips-ctlog-verifyfulcio | 0, 0, 0 |
| Chainguard | falcoctl | 0, 0, 0 |
| Chainguard | vexctl | 0, 0, 0 |
| Wolfi | tekton-chains | 0, 0, 0 |
| Wolfi | kots | 0, 0, 0 |
| Chainguard | skopeo | 0, 0, 0 |
…and 23 more
Exploit Intelligence
- GO-2026-4311.json (github-poc)
Timeline
- Jan 14, 2026 CVE Published
- Mar 4, 2026 CVE Updated