VDB
CGA-vc5g-x3vg-q749
CGA-vc5g-x3vg-q749
PUBLISHED
Record from OSV · Published March 5, 2026
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| ztunnel-1.29 | Wolfi | 1.29.1-r1 |
| py3.13-hf-xet | Wolfi | 1.4.0-r1 |
| nushell-plugins | Wolfi | 0.111.0-r3 |
| zed | Chainguard | 0.227.1-r1 |
| lychee | Wolfi | 0.23.0-r1 |
| cargo-audit | Chainguard | 0.22.1-r2 |
| rustls-ffi | Chainguard | 0.15.0-r5 |
| py3.10-hf-xet | Wolfi | 1.4.0-r1 |
| parseable | Chainguard | 2.5.14-r1 |
| linkerd-extension-init | Chainguard | 0.1.9-r0 |
| komodo-periphery | Chainguard | 1.19.5-r4 |
| rustup | Wolfi | 1.28.2-r5 |
49 more packages have a fixed version. See every fix in Lookup.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Wolfi | ztunnel-1.29 | 0 |
| Wolfi | py3.13-hf-xet | 0 |
| Wolfi | nushell-plugins | 0 |
| Chainguard | zed | 0 |
| Wolfi | lychee | 0 |
| Chainguard | cargo-audit | 0 |
| Chainguard | rustls-ffi | 0 |
| Wolfi | py3.10-hf-xet | 0 |
| Chainguard | parseable | 0 |
| Chainguard | linkerd-extension-init | 0 |
| Chainguard | komodo-periphery | 0 |
| Wolfi | rustup | 0 |
| Wolfi | parseable | 0 |
| Wolfi | zizmor | 0 |
| Chainguard | linkerd2-controller | 0 |
| Chainguard | garage-2 | 0 |
| Chainguard | linkerd2-cni-repair-controller | 0 |
| Chainguard | komodo-cli | 0 |
| Chainguard | nushell | 0 |
| Chainguard | linkerd2-proxy | 0 |
…and 41 more
Timeline
- Mar 5, 2026 CVE Published
- May 5, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CGA-vc5g-x3vg-q749
vulnetix vdb fixes CGA-vc5g-x3vg-q749Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CGA-vc5g-x3vg-q749/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart