VDB

CGA-gwj3-f8j3-cq37

CGA-gwj3-f8j3-cq37 PUBLISHED

Record from OSV · Published January 29, 2026

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
minio-bitnami-2025-compatChainguard0.20231101.183725-r0
k3s-staticWolfi1.28.3-r1
k3s-multicallChainguard1.28.3-r1
k3s-staticChainguard1.28.3-r1
minio-bitnami-2024-compatChainguard0.20231101.183725-r0
k3s-embeddedChainguard1.28.3-r1
telegraf-1.26Chainguard1.26.3-r6
nats-server-compatChainguard2.10.4-r0
minio-bitnami-2025-compatWolfi0.20231101.183725-r0
telegraf-1.26Wolfi1.26.3-r6
nats-serverWolfi2.10.4-r0
minioWolfi0.20231101.183725-r0

14 more packages have a fixed version. See every fix in Lookup.

Affected products

VendorProductVersions
Chainguardminio-bitnami-2025-compat0
Wolfik3s-static0
Chainguardk3s-multicall0
Chainguardk3s-static0
Chainguardminio-bitnami-2024-compat0
Chainguardk3s-embedded0
Chainguardtelegraf-1.260
Chainguardnats-server-compat0
Wolfiminio-bitnami-2025-compat0
Wolfitelegraf-1.260
Wolfinats-server0
Wolfiminio0
Wolfik3s-multicall0
Wolfinats-server-compat0
Wolfinats0
Wolfiminio-bitnami-2024-compat0
Wolfik3s-images0
Chainguardminio0
Chainguardnats-server0
Chainguardk3s0

…and 6 more

Timeline

  • Jan 29, 2026 CVE Published
  • Feb 4, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CGA-gwj3-f8j3-cq37
vulnetix vdb fixes CGA-gwj3-f8j3-cq37

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CGA-gwj3-f8j3-cq37/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›