← Back
CGA-3hmx-6mpf-9xph
CGA-3hmx-6mpf-9xph
AI summary snake-internal / snake-template-v1
A weakness called CGA-3hmx-6mpf-9xph was discovered in the affected product.
Severity is Info. Low severity or not yet rated.
What you should do: update the affected software to the latest version. If unsure, ask your IT team or search the vendor's site for "the product CGA-3hmx-6mpf-9xph".
CGA-3hmx-6mpf-9xph (the affected product). Severity: Info.
Response plan:
1. Check the vendor advisory for affected versions and the patched release.
2. If a vulnerable version is running in production, schedule maintenance (urgency from KEV/CVSS).
3. If no patch yet, mitigate via WAF rule, disabling the affected feature, etc.
4. Monitor logs / SIEM for known IOC and PoC signatures of this CVE.
PoCs and fix commits: see the 'References' section, MITRE, and NVD.
❓ What is the problem
A weakness (CGA-3hmx-6mpf-9xph) in the affected product. A serious software flaw has been identified.
📍 Affected scope
Target versions of the affected product (see vendor advisory). If running in production, identify exposure immediately.
🔥 Severity
Severity: Info. Low severity or not yet rated.
🔧 How to fix
Update to the patched release as listed in the vendor advisory.
🛡️ Workaround
If a patch is not yet available, consider disabling the affected feature, applying WAF rules, blocking via network ACLs, or isolating the vulnerable version.
🔍 Detection
Check version information, scan dependencies via SBOM, and monitor SIEM for IOC and PoC signatures related to this CVE.
Affected packages
Chainguard
apache-hop
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-r5"}]}]
Chainguard
apache-hop-fips
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-r5"}]}]
Chainguard
cassandra-4.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.20-r0"}]}]
Chainguard
cassandra-4.1
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.11-r0"}]}]
Chainguard
cassandra-fips-4.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.19-r5"}]}]
Chainguard
cassandra-fips-4.1
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.10-r5"}]}]
Chainguard
cassandra-fips-5.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.6-r6"}]}]
Chainguard
debezium-3.5-connector-jdbc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]
Chainguard
debezium-3.5-connector-mariadb
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]
Chainguard
debezium-3.5-connector-mongodb
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]
Chainguard
debezium-3.5-connector-mysql
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]
Chainguard
debezium-3.5-connector-postgres
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]
Chainguard
debezium-3.5-connector-sqlserver
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]
Chainguard
debezium-connector-db2-3.5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r1"}]}]
Chainguard
debezium-connector-ibmi-3.5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r1"}]}]
Chainguard
debezium-connector-informix-3.5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r1"}]}]
Chainguard
debezium-connector-spanner-3.4
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r1"}]}]
Chainguard
debezium-connector-spanner-3.5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r1"}]}]
Chainguard
debezium-connector-vitess-3.5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r1"}]}]
Chainguard
kafka-3.7
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-r53"}]}]
Chainguard
kafka-3.8
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.1-r52"}]}]
Chainguard
kafka-4.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.1-r8"}]}]
Chainguard
kafka-4.1
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-r7"}]}]
Chainguard
kafka-fips-4.1
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-r3"}]}]
Chainguard
knative-kafka-broker-1.17-dispatcher-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-r14"}]}]
Chainguard
knative-kafka-broker-1.17-receiver-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-r14"}]}]
Chainguard
knative-kafka-broker-1.18-dispatcher-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-r8"}]}]
Chainguard
knative-kafka-broker-1.18-receiver-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-r8"}]}]
Chainguard
knative-kafka-broker-1.19-dispatcher-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.11-r8"}]}]
Chainguard
knative-kafka-broker-1.19-receiver-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.11-r8"}]}]
Chainguard
knative-kafka-broker-1.20-dispatcher-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]
Chainguard
knative-kafka-broker-1.20-receiver-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]
Chainguard
knative-kafka-broker-1.21-dispatcher-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.2-r0"}]}]
Chainguard
knative-kafka-broker-1.21-receiver-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.2-r0"}]}]
Chainguard
knative-kafka-broker-fips-1.20-dispatcher-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r2"}]}]
Chainguard
knative-kafka-broker-fips-1.20-receiver-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r2"}]}]
Chainguard
knative-kafka-broker-fips-1.21-dispatcher-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.2-r2"}]}]
Chainguard
knative-kafka-broker-fips-1.21-receiver-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.2-r2"}]}]
Chainguard
logstash-8.17
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r18"}]}]
Chainguard
logstash-8.17-iamguarded-compat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r18"}]}]
Chainguard
logstash-8.17-with-output-opensearch
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r18"}]}]
Chainguard
logstash-8.19
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.14-r3"}]}]
Chainguard
logstash-8.19-iamguarded-compat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.14-r3"}]}]
Chainguard
logstash-8.19-with-output-opensearch
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.14-r3"}]}]
Chainguard
logstash-9.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r17"}]}]
Chainguard
logstash-9.0-iamguarded-compat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r17"}]}]
Chainguard
logstash-9.0-with-output-opensearch
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r17"}]}]
Chainguard
opensearch-2-security
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r12"}]}]
Chainguard
sonarqube
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.0.119303-r2"}]}]
Chainguard
spark-3.5-scala-2.12
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.8-r9"}]}]
Chainguard
spark-3.5-scala-2.13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.8-r9"}]}]
Chainguard
spark-4.0-scala-2.13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r8"}]}]
Chainguard
spark-4.1-scala-2.13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-r9"}]}]
Chainguard
spark-fips-3.5-scala-2.12
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.4-r28"}]}]
Chainguard
spark-fips-3.5-scala-2.13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.4-r28"}]}]
Chainguard
spark-fips-4.1-scala-2.13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-r7"}]}]
Chainguard
strimzi-kafka-operator-kafka-thirdparty-libs-cc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.51.0-r2"}]}]
Chainguard
zipkin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r14"}]}]
Chainguard
zipkin-slim
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r14"}]}]
Wolfi
cassandra-4.1
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.11-r0"}]}]
Wolfi
debezium-3.5-connector-jdbc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]
Wolfi
debezium-3.5-connector-mariadb
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]
Wolfi
debezium-3.5-connector-mongodb
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]
Wolfi
debezium-3.5-connector-mysql
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]
Wolfi
debezium-3.5-connector-postgres
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]
Wolfi
debezium-3.5-connector-sqlserver
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}]
Wolfi
debezium-connector-db2-3.5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r1"}]}]
Wolfi
debezium-connector-ibmi-3.5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r1"}]}]
Wolfi
debezium-connector-informix-3.5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r1"}]}]
Wolfi
debezium-connector-spanner-3.4
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r1"}]}]
Wolfi
debezium-connector-spanner-3.5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r1"}]}]
Wolfi
debezium-connector-vitess-3.5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r1"}]}]
Wolfi
kafka-3.8
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.1-r52"}]}]
Wolfi
kafka-4.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.1-r8"}]}]
Wolfi
kafka-4.1
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-r7"}]}]
Wolfi
opensearch-2-security
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r12"}]}]
Wolfi
sonarqube
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.0.119303-r2"}]}]
Wolfi
spark-3.5-scala-2.12
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.8-r9"}]}]
Wolfi
spark-3.5-scala-2.13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.8-r9"}]}]
Wolfi
spark-4.0-scala-2.13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r8"}]}]
Wolfi
spark-4.1-scala-2.13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-r9"}]}]
Wolfi
strimzi-kafka-operator-kafka-thirdparty-libs-cc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.51.0-r2"}]}]
Wolfi
zipkin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r14"}]}]
Wolfi
zipkin-slim
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r14"}]}]
Chainguard
strimzi-kafka-operator-fips-kafka-thirdparty-libs-cc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-r0"}]}]
Chainguard
knative-kafka-broker-1.22-receiver-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.1-r1"}]}]
Chainguard
knative-kafka-broker-fips-1.22-dispatcher-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.1-r1"}]}]
Chainguard
kafbat-ui-fips
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-r0"}]}]
Chainguard
knative-kafka-broker-1.22-dispatcher-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.1-r1"}]}]
Chainguard
knative-kafka-broker-fips-1.22-receiver-loom
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.1-r1"}]}]