VDB
CGA-vfrx-695v-7wq5
CGA-vfrx-695v-7wq5
PUBLISHED
Record from OSV · Published February 28, 2026
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| jaeger-2-query | Chainguard | 2.15.1-r1 |
| gitlab-workhorse-ce-18.7 | Chainguard | 18.7.5-r1 |
| jaeger-2-jaeger | Chainguard | 2.15.1-r1 |
| github-mcp-server | Wolfi | 0.31.0-r1 |
| opencost-fips | Chainguard | 1.119.2-r1 |
| osv-scanner | Chainguard | 2.3.3-r2 |
| gitlab-workhorse-ce-18.8 | Chainguard | 18.8.5-r1 |
| opencost | Chainguard | 1.119.2-r1 |
| jaeger-2-fips-all-in-one | Chainguard | 2.15.1-r1 |
| gitlab-workhorse-ce-fips-18.8 | Chainguard | 18.8.5-r1 |
| opencost | Wolfi | 1.119.2-r1 |
| jaeger-2-fips-query | Chainguard | 2.15.1-r1 |
26 more packages have a fixed version. See every fix in Lookup.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Chainguard | jaeger-2-query | 0 |
| Chainguard | gitlab-workhorse-ce-18.7 | 0 |
| Chainguard | jaeger-2-jaeger | 0 |
| Wolfi | github-mcp-server | 0 |
| Chainguard | opencost-fips | 0 |
| Chainguard | osv-scanner | 0 |
| Chainguard | gitlab-workhorse-ce-18.8 | 0 |
| Chainguard | opencost | 0 |
| Chainguard | jaeger-2-fips-all-in-one | 0 |
| Chainguard | gitlab-workhorse-ce-fips-18.8 | 0 |
| Wolfi | opencost | 0 |
| Chainguard | jaeger-2-fips-query | 0 |
| Chainguard | datadog-cluster-agent-7.76 | 0 |
| Wolfi | gptscript | 0 |
| Chainguard | flux-operator-mcp-fips | 0 |
| Chainguard | datadog-cluster-agent-fips-7.76 | 0 |
| Wolfi | jaeger-2-ingester | 0 |
| Wolfi | jaeger-2-collector | 0 |
| Wolfi | jaeger-2-jaeger | 0 |
| Chainguard | jaeger-2-all-in-one | 0 |
…and 18 more
Timeline
- Feb 28, 2026 CVE Published
- Mar 18, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CGA-vfrx-695v-7wq5
vulnetix vdb fixes CGA-vfrx-695v-7wq5Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CGA-vfrx-695v-7wq5/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart