VDB

CGA-9m54-986w-g7rm

CGA-9m54-986w-g7rm PUBLISHED

Record from OSV · Published January 23, 2026

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
cloudbeat-8.19Chainguard8.19.12-r0
crossplane-1.20Chainguard1.20.4-r6
teleport-18.6-kube-agent-updaterChainguard18.6.8-r9
teleport-18Wolfi18.7.6-r0
teleport-18.6-kube-agent-updaterWolfi18.6.8-r9
teleport-18-kube-agent-updater-compatChainguard18.7.2-r12
trivyChainguard0.68.2-r2
teleport-18Chainguard18.7.6-r0
tekton-chainsWolfi0.26.0-r6
tknChainguard0.43.0-r4
policy-controller-testerWolfi0.15.1-r0
spire-agentChainguard1.14.1-r2

88 more packages have a fixed version. See every fix in Lookup.

Affected products

VendorProductVersions
Chainguardcloudbeat-8.190
Chainguardcrossplane-1.200
Chainguardteleport-18.6-kube-agent-updater0
Wolfiteleport-180
Wolfiteleport-18.6-kube-agent-updater0
Chainguardteleport-18-kube-agent-updater-compat0
Chainguardtrivy0
Chainguardteleport-180
Wolfitekton-chains0
Chainguardtkn0
Wolfipolicy-controller-tester0
Chainguardspire-agent0
Chainguardtekton-chains0
Chainguardskaffold0
Chainguardteleport-17-kube-agent-updater0
Wolfitflint0
Wolfikyverno-init-container-1.160
Chainguardkyverno-init-container-1.160
Wolfikyverno-notation-aws0
Wolfigh0

…and 105 more

Timeline

  • Jan 23, 2026 CVE Published
  • Apr 30, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CGA-9m54-986w-g7rm
vulnetix vdb fixes CGA-9m54-986w-g7rm

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CGA-9m54-986w-g7rm/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›