VDB

CGA-fhhw-gfrj-24xq

CGA-fhhw-gfrj-24xq REJECTED

Record from OSV · Published January 28, 2026

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
openjdk-12-jreWolfi12.0.2.10-r10
openjdk-12-jreChainguard12.0.2.10-r10
openjdk-12-default-jvmChainguard12.0.2.10-r10
openjdk-12Wolfi12.0.2.10-r10
openjdk-12-demosWolfi12.0.2.10-r10
openjdk-12-jre-baseWolfi12.0.2.10-r10
openjdk-12-jmodsWolfi12.0.2.10-r10
openjdk-12-demosChainguard12.0.2.10-r10
openjdk-12-default-jvmWolfi12.0.2.10-r10
openjdk-12-docChainguard12.0.2.10-r10
openjdk-12-docWolfi12.0.2.10-r10
openjdk-12-jmodsChainguard12.0.2.10-r10

4 more packages have a fixed version. See every fix in Lookup.

Affected products

VendorProductVersions
Wolfiopenjdk-12-jre0
Chainguardopenjdk-12-jre0
Chainguardopenjdk-12-default-jvm0
Wolfiopenjdk-120
Wolfiopenjdk-12-demos0
Wolfiopenjdk-12-jre-base0
Wolfiopenjdk-12-jmods0
Chainguardopenjdk-12-demos0
Wolfiopenjdk-12-default-jvm0
Chainguardopenjdk-12-doc0
Wolfiopenjdk-12-doc0
Chainguardopenjdk-12-jmods0
Chainguardopenjdk-12-jre-base0
Chainguardopenjdk-12-default-jdk0
Wolfiopenjdk-12-default-jdk0
Chainguardopenjdk-120

Timeline

  • Jan 28, 2026 CVE Published
  • Jan 28, 2026 CVE Rejected

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CGA-fhhw-gfrj-24xq
vulnetix vdb fixes CGA-fhhw-gfrj-24xq

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CGA-fhhw-gfrj-24xq/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›