VDB

CGA-vqcf-23pj-f75j

CGA-vqcf-23pj-f75j PUBLISHED

Record from OSV · Published January 29, 2026

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
sdp-device-id-serviceChainguard1.3.6-r1
qdrantChainguard1.15.5-r0
bat-docWolfi0.24.0-r5
shadowsocks-rust-sslocalWolfi1.21.2-r3
linkerd2-proxy-identityChainguard24.11.8-r1
sdp-k8s-injectorWolfi1.3.6-r1
wadmChainguard0.19.0-r0
sdp-identity-serviceChainguard1.3.6-r1
cargo-audit-docChainguard0.21.0-r3
kdashChainguard0.6.1-r4
shadowsocks-rust-ssserverWolfi1.21.2-r3
ztunnel-fips-1.24-compatChainguard1.24.2-r2

88 more packages have a fixed version. See every fix in Lookup.

Affected products

VendorProductVersions
Chainguardsdp-device-id-service0
Chainguardqdrant0
Wolfibat-doc0
Wolfishadowsocks-rust-sslocal0
Chainguardlinkerd2-proxy-identity0
Wolfisdp-k8s-injector0
Chainguardwadm0
Chainguardsdp-identity-service0
Chainguardcargo-audit-doc0
Chainguardkdash0
Wolfishadowsocks-rust-ssserver0
Chainguardztunnel-fips-1.24-compat0
Chainguardlinkerd2-tap0
Chainguardparseable0
Wolfilinkerd2-cli0
Wolfilychee0
Chainguardfnm0
Chainguardnetavark0
Chainguardsamply0
Wolfioranda0

…and 113 more

Timeline

  • Jan 29, 2026 CVE Published
  • Apr 24, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CGA-vqcf-23pj-f75j
vulnetix vdb fixes CGA-vqcf-23pj-f75j

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CGA-vqcf-23pj-f75j/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›