CGA-2q6f-ghc5-4j7v

← Back

CGA-2q6f-ghc5-4j7v

AI summary snake-internal / snake-template-v1

A weakness called CGA-2q6f-ghc5-4j7v was discovered in the affected product. Severity is Info. Low severity or not yet rated. What you should do: update the affected software to the latest version. If unsure, ask your IT team or search the vendor's site for "the product CGA-2q6f-ghc5-4j7v".

CGA-2q6f-ghc5-4j7v (the affected product). Severity: Info. Response plan: 1. Check the vendor advisory for affected versions and the patched release. 2. If a vulnerable version is running in production, schedule maintenance (urgency from KEV/CVSS). 3. If no patch yet, mitigate via WAF rule, disabling the affected feature, etc. 4. Monitor logs / SIEM for known IOC and PoC signatures of this CVE. PoCs and fix commits: see the 'References' section, MITRE, and NVD.

❓ What is the problem

A weakness (CGA-2q6f-ghc5-4j7v) in the affected product. A serious software flaw has been identified.

📍 Affected scope

Target versions of the affected product (see vendor advisory). If running in production, identify exposure immediately.

🔥 Severity

Severity: Info. Low severity or not yet rated.

🔧 How to fix

Update to the patched release as listed in the vendor advisory.

🛡️ Workaround

If a patch is not yet available, consider disabling the affected feature, applying WAF rules, blocking via network ACLs, or isolating the vulnerable version.

🔍 Detection

Check version information, scan dependencies via SBOM, and monitor SIEM for IOC and PoC signatures related to this CVE.

Affected packages

Chainguard apache-pulsar-4.0

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]

Chainguard apache-pulsar-fips-4.2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r2"}]}]

Chainguard hono-service-auth

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r17"}]}]

Chainguard hono-service-device-registry-jdbc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r17"}]}]

Chainguard keycloak-26.4

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.4.7-r9"}]}]

Chainguard keycloak-26.5-operator

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.5.7-r1"}]}]

Chainguard keycloak-fips-26.6

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.6.2-r0"}]}]

Chainguard knative-kafka-broker-1.22-dispatcher-loom

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.0-r5"}]}]

Chainguard knative-kafka-broker-fips-1.20-dispatcher-loom

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r3"}]}]

Chainguard spark-fips-4.1-scala-2.13

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-r13"}]}]

Chainguard strimzi-kafka-operator-kafka-thirdparty-libs-cc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.51.0-r24"}]}]

Wolfi keycloak-26.4

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.4.7-r9"}]}]

Wolfi keycloak-26.5-operator

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.5.7-r1"}]}]

Wolfi strimzi-kafka-operator-kafka-thirdparty-libs-cc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.51.0-r24"}]}]

Chainguard apache-camel-karavan-devmode

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.2-r8"}]}]

Chainguard apache-pulsar-4.1

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-r11"}]}]

Chainguard spark-4.0-scala-2.13

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r11"}]}]

Chainguard spark-kubernetes-operator

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-r2"}]}]

Wolfi apache-pulsar-4.1

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-r11"}]}]

Wolfi spark-4.0-scala-2.13

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r11"}]}]

Chainguard keycloak-26.6