VDB
CGA-9c4c-5h22-fv67
CGA-9c4c-5h22-fv67
PUBLISHED
Record from OSV · Published April 9, 2026
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| py3-cassandra-medusa | Chainguard | 0.27.1-r2 |
| py3.11-prefect | Chainguard | 3.6.26-r0 |
| mycli | Chainguard | 1.68.1-r0 |
| vllm-openai-cuda-12.9 | Chainguard | 0.19.0-r0 |
| datadog-agent-7.75-core-integrations | Chainguard | 7.75.4-r6 |
| authentik-2025.12 | Chainguard | 2025.12.4-r3 |
| kserve-storage-controller | Chainguard | 0.16.0-r25 |
| airflow-2 | Chainguard | 2.11.2-r8 |
| airflow-core-2 | Chainguard | 2.11.2-r5 |
| tritonserver-backend-vllm-cuda-13.0 | Chainguard | 25.11-r4 |
| kubeflow-volumes-web-app | Wolfi | 1.10.0-r16 |
| opal | Chainguard | 0.9.4-r2 |
49 more packages have a fixed version. See every fix in Lookup.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Chainguard | py3-cassandra-medusa | 0 |
| Chainguard | py3.11-prefect | 0 |
| Chainguard | mycli | 0 |
| Chainguard | vllm-openai-cuda-12.9 | 0 |
| Chainguard | datadog-agent-7.75-core-integrations | 0 |
| Chainguard | authentik-2025.12 | 0 |
| Chainguard | kserve-storage-controller | 0 |
| Chainguard | airflow-2 | 0 |
| Chainguard | airflow-core-2 | 0 |
| Chainguard | tritonserver-backend-vllm-cuda-13.0 | 0 |
| Wolfi | kubeflow-volumes-web-app | 0 |
| Chainguard | opal | 0 |
| Wolfi | kubeflow-jupyter-web-app | 0 |
| Chainguard | airflow-3 | 0 |
| Chainguard | airflow-core-3 | 0 |
| Chainguard | barman-cloudnative-pg | 0 |
| Chainguard | apache-beam-python-3.13-sdk | 0 |
| Chainguard | dask-kubernetes | 0 |
| Chainguard | kubeflow-pipelines-visualization-server | 0 |
| Chainguard | py3.12-prefect | 0 |
…and 41 more
Timeline
- Apr 9, 2026 CVE Published
- Apr 29, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CGA-9c4c-5h22-fv67
vulnetix vdb fixes CGA-9c4c-5h22-fv67
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CGA-9c4c-5h22-fv67/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart