VDB

CGA-vj4x-mwvp-c5pq

CGA-vj4x-mwvp-c5pq PUBLISHED

Record from OSV · Published January 29, 2026

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
openssl-docWolfi3.0.7-r1
openssl-configChainguard3.0.7-r1
openssl-provider-legacyWolfi3.0.7-r1
openssl-engine-afalgChainguard3.0.7-r1
openssl-devWolfi3.0.7-r1
openssl-docChainguard3.0.7-r1
openssl-engine-capiWolfi3.0.7-r1
libcrypto3Chainguard3.0.7-r1
openssl-engine-padlockWolfi3.0.7-r1
opensslChainguard3.0.7-r1
openssl-provider-legacyChainguard3.0.7-r1
openssl-engine-loader-atticChainguard3.0.7-r1

13 more packages have a fixed version. See every fix in Lookup.

Affected products

VendorProductVersions
Chainguardruby-3.1-doc0
Wolfiopenssl-doc0
Wolfiruby-3.1-doc0
Chainguardopenssl-config0
Wolfiopenssl-provider-legacy0
Chainguardopenssl-engine-afalg0
Wolfiopenssl-dev0
Chainguardopenssl-doc0
Wolfiopenssl-engine-capi0
Chainguardlibcrypto30
Wolfiruby-3.1-base-dev0
Wolfiopenssl-engine-padlock0
Chainguardopenssl0
Chainguardruby-3.10
Chainguardopenssl-provider-legacy0
Chainguardopenssl-engine-loader-attic0
Chainguardruby-3.1-base-dev0
Wolfiopenssl0
Chainguardopenssl-engine-padlock0
Chainguardruby-3.1-base0

…and 15 more

Timeline

  • Jan 29, 2026 CVE Published
  • Feb 4, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CGA-vj4x-mwvp-c5pq
vulnetix vdb fixes CGA-vj4x-mwvp-c5pq

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CGA-vj4x-mwvp-c5pq/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›