VDB

CGA-xr7r-gj78-rrcf

CGA-xr7r-gj78-rrcf PUBLISHED

Record from OSV · Published January 29, 2026

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
openssl-engine-afalgChainguard3.1.0-r0
openssl-dbgChainguard3.1.0-r0
openssl-provider-fipsChainguard3.0.8-r0
openssl-provider-legacyChainguard3.1.0-r0
libssl3Wolfi3.1.0-r0
openssl-dbgWolfi3.1.0-r0
openssl-engine-afalgWolfi3.1.0-r0
openssl-docWolfi3.1.0-r0
openssl-engine-padlockChainguard3.1.0-r0
libcrypto3Wolfi3.1.0-r0
openssl-configWolfi3.1.0-r0
libssl3Chainguard3.1.0-r0

13 more packages have a fixed version. See every fix in Lookup.

Affected products

VendorProductVersions
Chainguardopenssl-engine-afalg0
Wolfiruby-3.1-base0
Chainguardruby-3.1-base-dev0
Chainguardopenssl-dbg0
Chainguardopenssl-provider-fips0
Chainguardopenssl-provider-legacy0
Wolfilibssl30
Chainguardruby-3.10
Wolfiruby-3.1-doc0
Wolfiopenssl-dbg0
Wolfiopenssl-engine-afalg0
Wolfiopenssl-doc0
Chainguardopenssl-engine-padlock0
Wolfilibcrypto30
Wolfiopenssl-config0
Chainguardlibssl30
Chainguardopenssl-engine-capi0
Chainguardopenssl-engine-loader-attic0
Wolfiopenssl-dev0
Chainguardruby-3.1-dev0

…and 15 more

Timeline

  • Jan 29, 2026 CVE Published
  • Feb 4, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CGA-xr7r-gj78-rrcf
vulnetix vdb fixes CGA-xr7r-gj78-rrcf

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CGA-xr7r-gj78-rrcf/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›