← Back
CGA-2hvw-crv4-gr28
CGA-2hvw-crv4-gr28
AI summary snake-internal / snake-template-v1
A weakness called CGA-2hvw-crv4-gr28 was discovered in the affected product.
Severity is Info. Low severity or not yet rated.
What you should do: update the affected software to the latest version. If unsure, ask your IT team or search the vendor's site for "the product CGA-2hvw-crv4-gr28".
CGA-2hvw-crv4-gr28 (the affected product). Severity: Info.
Response plan:
1. Check the vendor advisory for affected versions and the patched release.
2. If a vulnerable version is running in production, schedule maintenance (urgency from KEV/CVSS).
3. If no patch yet, mitigate via WAF rule, disabling the affected feature, etc.
4. Monitor logs / SIEM for known IOC and PoC signatures of this CVE.
PoCs and fix commits: see the 'References' section, MITRE, and NVD.
❓ What is the problem
A weakness (CGA-2hvw-crv4-gr28) in the affected product. A serious software flaw has been identified.
📍 Affected scope
Target versions of the affected product (see vendor advisory). If running in production, identify exposure immediately.
🔥 Severity
Severity: Info. Low severity or not yet rated.
🔧 How to fix
Update to the patched release as listed in the vendor advisory.
🛡️ Workaround
If a patch is not yet available, consider disabling the affected feature, applying WAF rules, blocking via network ACLs, or isolating the vulnerable version.
🔍 Detection
Check version information, scan dependencies via SBOM, and monitor SIEM for IOC and PoC signatures related to this CVE.
Affected packages
Chainguard
buck2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260315-r4"}]}]
Chainguard
cargo-audit
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.1-r4"}]}]
Chainguard
deno
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.10-r1"}]}]
Chainguard
efs-utils
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r4"}]}]
Chainguard
efs-utils-for-aws-csi-driver
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r4"}]}]
Chainguard
garage-2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r2"}]}]
Chainguard
komodo-cli
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]
Chainguard
komodo-core
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]
Chainguard
komodo-periphery
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]
Chainguard
linkerd-extension-init
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.10-r0"}]}]
Chainguard
linkerd-network-validator
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.8-r0"}]}]
Chainguard
linkerd2-cni-repair-controller
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.6-r3"}]}]
Chainguard
linkerd2-controller
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.3.3-r1"}]}]
Chainguard
linkerd2-proxy
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.346.0-r0"}]}]
Chainguard
lychee
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-r6"}]}]
Chainguard
mise
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.3.17-r0"}]}]
Chainguard
ntpd-rs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-r4"}]}]
Chainguard
nushell
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.111.0-r5"}]}]
Chainguard
nushell-plugins
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.111.0-r5"}]}]
Chainguard
parseable
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.5-r0"}]}]
Chainguard
pixi
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66.0-r3"}]}]
Chainguard
py3.10-hf-xet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-r1"}]}]
Chainguard
py3.11-hf-xet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-r1"}]}]
Chainguard
py3.12-hf-xet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-r1"}]}]
Chainguard
py3.13-hf-xet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-r1"}]}]
Chainguard
qdrant
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.1-r1"}]}]
Chainguard
rustls-ffi
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1-r0"}]}]
Chainguard
rustup
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.0-r1"}]}]
Chainguard
wasmcloud
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-r0"}]}]
Chainguard
zed
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.228.0-r1"}]}]
Chainguard
zellij
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-r0"}]}]
Chainguard
zizmor
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.1-r3"}]}]
Chainguard
ztunnel-1.27
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.9-r5"}]}]
Chainguard
ztunnel-1.28
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.5-r3"}]}]
Chainguard
ztunnel-1.29
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.1-r8"}]}]
Wolfi
buck2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260315-r4"}]}]
Wolfi
cargo-audit
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.1-r4"}]}]
Wolfi
deno
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.10-r1"}]}]
Wolfi
efs-utils
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r4"}]}]
Wolfi
efs-utils-for-aws-csi-driver
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r4"}]}]
Wolfi
linkerd-extension-init
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.10-r0"}]}]
Wolfi
linkerd-network-validator
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.8-r0"}]}]
Wolfi
linkerd2-controller
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.3.3-r1"}]}]
Wolfi
linkerd2-proxy
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.346.0-r0"}]}]
Wolfi
lychee
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-r6"}]}]
Wolfi
ntpd-rs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-r4"}]}]
Wolfi
nushell
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.111.0-r5"}]}]
Wolfi
nushell-plugins
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.111.0-r5"}]}]
Wolfi
parseable
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.5-r0"}]}]
Wolfi
pixi
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66.0-r3"}]}]
Wolfi
py3.10-hf-xet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-r1"}]}]
Wolfi
py3.11-hf-xet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-r1"}]}]
Wolfi
py3.12-hf-xet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-r1"}]}]
Wolfi
py3.13-hf-xet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-r1"}]}]
Wolfi
qdrant
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.1-r1"}]}]
Wolfi
rustls-ffi
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1-r0"}]}]
Wolfi
rustup
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.0-r1"}]}]
Wolfi
wasmcloud
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-r0"}]}]
Wolfi
zed
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.228.0-r1"}]}]
Wolfi
zellij
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-r0"}]}]
Wolfi
zizmor
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.1-r3"}]}]
Wolfi
ztunnel-1.27
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.9-r5"}]}]
Wolfi
ztunnel-1.28
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.5-r3"}]}]
Wolfi
ztunnel-1.29
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.1-r8"}]}]