CGA-mm22-qhhm-h86g

CGA-mm22-qhhm-h86g PUBLISHED

Record from OSV · Published April 2, 2026

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
metaflow-service-fips	Chainguard	2.5.0-r2
kubeflow-pipelines-visualization-server	Chainguard	2.16.0-r4
authentik-2025.12	Chainguard	2025.12.4-r3
request-1276	Chainguard	0.27.1-r2
authentik-fips-2026.2	Chainguard	2026.2.1-r3
open-webui	Wolfi	0.8.12-r3
kubeflow-pipelines-visualization-server	Wolfi	2.16.0-r4
keep-api-fips	Chainguard	0.51.0-r2
litellm	Chainguard	1.82.3.0-r3
kserve-storage-controller	Wolfi	0.17.0-r2
dask-kubernetes	Chainguard	2026.3.0-r3
awx	Chainguard	24.6.1-r33

20 more packages have a fixed version. See every fix in Lookup.

Affected products

Vendor	Product	Versions
Chainguard	metaflow-service-fips	0
Chainguard	kubeflow-pipelines-visualization-server	0
Chainguard	authentik-2025.12	0
Chainguard	request-1276	0
Chainguard	authentik-fips-2026.2	0
Wolfi	open-webui	0
Wolfi	kubeflow-pipelines-visualization-server	0
Chainguard	keep-api-fips	0
Chainguard	litellm	0
Wolfi	kserve-storage-controller	0
Chainguard	dask-kubernetes	0
Chainguard	awx	0
Chainguard	airflow-2	0
Chainguard	datahub-ingestion	0
Chainguard	open-webui	0
Chainguard	datahub-ingestion-fips	0
Wolfi	dask-kubernetes	0
Chainguard	py3-cassandra-medusa	0
Chainguard	keep-api	0
Wolfi	airflow-3	0

…and 12 more

Timeline

Apr 2, 2026 CVE Published
Apr 30, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CGA-mm22-qhhm-h86g
vulnetix vdb fixes CGA-mm22-qhhm-h86g

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CGA-mm22-qhhm-h86g/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →