VDB

CGA-j87j-7fw6-jfqx

CGA-j87j-7fw6-jfqx PUBLISHED

Record from OSV · Published March 25, 2026

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
jenkins-2.541-openjdk-17Chainguard2.541.3-r2
camunda-zeebe-8.7Chainguard8.7.27-r0
jenkins-2-openjdk-25Chainguard2.555-r3
apache-nifi-registryWolfi2.8.0-r2
camunda-zeebe-8.6Chainguard8.6.39-r0
nacos-dockerChainguard3.2.0-r1
jenkins-2-openjdk-21Wolfi2.555-r3
apache-nifi-registry-toolkitWolfi2.8.0-r2
nacosChainguard3.2.0-r1
jenkins-2-openjdk-25Wolfi2.555-r3
thingsboard-tb-nodeWolfi4.3.1.1-r0
apache-nifiWolfi2.8.0-r5

11 more packages have a fixed version. See every fix in Lookup.

Affected products

VendorProductVersions
Chainguardjenkins-2.541-openjdk-170
Chainguardcamunda-zeebe-8.70
Chainguardjenkins-2-openjdk-250
Wolfiapache-nifi-registry0
Chainguardcamunda-zeebe-8.60
Chainguardnacos-docker0
Wolfijenkins-2-openjdk-210
Wolfiapache-nifi-registry-toolkit0
Chainguardnacos0
Wolfijenkins-2-openjdk-250
Wolfithingsboard-tb-node0
Wolfiapache-nifi0
Chainguardkafbat-ui-fips0
Chainguardjenkins-2.541-openjdk-210
Chainguardapache-nifi-registry-toolkit0
Chainguardapache-nifi-registry0
Chainguardjenkins-2.5410
Chainguardapache-nifi0
Chainguardcamunda-8.80
Chainguardkafbat-ui0

…and 3 more

Timeline

  • Mar 25, 2026 CVE Published
  • May 10, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CGA-j87j-7fw6-jfqx
vulnetix vdb fixes CGA-j87j-7fw6-jfqx

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CGA-j87j-7fw6-jfqx/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›