← Back
CGA-gfhp-qv7m-jq4m
CGA-gfhp-qv7m-jq4m
AI summary snake-internal / snake-template-v1
A weakness called CGA-gfhp-qv7m-jq4m was discovered in the affected product.
Severity is Info. Low severity or not yet rated.
What you should do: update the affected software to the latest version. If unsure, ask your IT team or search the vendor's site for "the product CGA-gfhp-qv7m-jq4m".
CGA-gfhp-qv7m-jq4m (the affected product). Severity: Info.
Response plan:
1. Check the vendor advisory for affected versions and the patched release.
2. If a vulnerable version is running in production, schedule maintenance (urgency from KEV/CVSS).
3. If no patch yet, mitigate via WAF rule, disabling the affected feature, etc.
4. Monitor logs / SIEM for known IOC and PoC signatures of this CVE.
PoCs and fix commits: see the 'References' section, MITRE, and NVD.
❓ What is the problem
A weakness (CGA-gfhp-qv7m-jq4m) in the affected product. A serious software flaw has been identified.
📍 Affected scope
Target versions of the affected product (see vendor advisory). If running in production, identify exposure immediately.
🔥 Severity
Severity: Info. Low severity or not yet rated.
🔧 How to fix
Update to the patched release as listed in the vendor advisory.
🛡️ Workaround
If a patch is not yet available, consider disabling the affected feature, applying WAF rules, blocking via network ACLs, or isolating the vulnerable version.
🔍 Detection
Check version information, scan dependencies via SBOM, and monitor SIEM for IOC and PoC signatures related to this CVE.
Affected packages
Chainguard
actions-runner
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.333.1-r1"}]}]
Chainguard
arangodb-3.12
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.7.2-r5"}]}]
Chainguard
argo-workflows-ui-3.6
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.19-r5"}]}]
Chainguard
argo-workflows-ui-3.7
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.12-r2"}]}]
Chainguard
argo-workflows-ui-4.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-r2"}]}]
Chainguard
emscripten
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.5-r1"}]}]
Chainguard
eslint
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.1.0-r1"}]}]
Chainguard
foxx-cli
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-r6"}]}]
Chainguard
gemini-cli
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.3-r0"}]}]
Chainguard
graalvm-25-ce-nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.2-r7"}]}]
Chainguard
kibana-7
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.29-r8"}]}]
Chainguard
kibana-8.17
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r16"}]}]
Chainguard
kibana-8.17-bitnami
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r16"}]}]
Chainguard
kibana-8.17-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r16"}]}]
Chainguard
kibana-8.19
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.15-r0"}]}]
Chainguard
kibana-8.19-bitnami
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.15-r0"}]}]
Chainguard
kibana-8.19-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.15-r0"}]}]
Chainguard
kibana-9.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r25"}]}]
Chainguard
kibana-9.0-bitnami
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r25"}]}]
Chainguard
kibana-9.0-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r25"}]}]
Chainguard
kibana-9.1
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.10-r17"}]}]
Chainguard
kibana-9.1-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.10-r17"}]}]
Chainguard
kibana-9.3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.4-r0"}]}]
Chainguard
kibana-9.3-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.4-r0"}]}]
Chainguard
kubeflow-centraldashboard
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-r18"}]}]
Chainguard
langfuse-2-worker
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r17"}]}]
Chainguard
langfuse-3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.164.0-r1"}]}]
Chainguard
langfuse-3-worker
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.164.0-r1"}]}]
Chainguard
langfuse-fips-2-worker
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r20"}]}]
Chainguard
langfuse-fips-3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.164.0-r1"}]}]
Chainguard
langfuse-fips-3-worker
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.164.0-r1"}]}]
Chainguard
lerna
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.7-r2"}]}]
Chainguard
npm
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.12.1-r0"}]}]
Chainguard
opensearch-dashboards-2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-r6"}]}]
Chainguard
opensearch-dashboards-2-dashboards-reporting
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-r6"}]}]
Chainguard
opensearch-dashboards-2-fips
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-r5"}]}]
Chainguard
opensearch-dashboards-2-fips-dashboards-reporting
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-r5"}]}]
Chainguard
opensearch-dashboards-3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Chainguard
opensearch-dashboards-3-alerting-dashboards-plugin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Chainguard
opensearch-dashboards-3-anomaly-detection-dashboards-plugin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Chainguard
opensearch-dashboards-3-dashboards-maps
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Chainguard
opensearch-dashboards-3-dashboards-notifications
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Chainguard
opensearch-dashboards-3-dashboards-observability
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Chainguard
opensearch-dashboards-3-dashboards-query-workbench
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Chainguard
opensearch-dashboards-3-dashboards-reporting
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Chainguard
opensearch-dashboards-3-dashboards-search-relevance
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Chainguard
opensearch-dashboards-3-fips
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r8"}]}]
Chainguard
opensearch-dashboards-3-fips-alerting-dashboards-plugin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r7"}]}]
Chainguard
opensearch-dashboards-3-fips-anomaly-detection-dashboards-plugin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r7"}]}]
Chainguard
opensearch-dashboards-3-fips-dashboards-maps
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r7"}]}]
Chainguard
opensearch-dashboards-3-fips-dashboards-notifications
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r7"}]}]
Chainguard
opensearch-dashboards-3-fips-dashboards-observability
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r7"}]}]
Chainguard
opensearch-dashboards-3-fips-dashboards-query-workbench
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r7"}]}]
Chainguard
opensearch-dashboards-3-fips-dashboards-reporting
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r7"}]}]
Chainguard
opensearch-dashboards-3-fips-dashboards-search-relevance
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r7"}]}]
Chainguard
opensearch-dashboards-3-fips-index-management-dashboards-plugin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r7"}]}]
Chainguard
opensearch-dashboards-3-fips-ml-commons-dashboards
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r7"}]}]
Chainguard
opensearch-dashboards-3-fips-security-analytics-dashboards-plugin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r7"}]}]
Chainguard
opensearch-dashboards-3-fips-security-dashboards-plugin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r7"}]}]
Chainguard
opensearch-dashboards-3-index-management-dashboards-plugin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Chainguard
opensearch-dashboards-3-ml-commons-dashboards
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Chainguard
opensearch-dashboards-3-security-analytics-dashboards-plugin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Chainguard
opensearch-dashboards-3-security-dashboards-plugin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Chainguard
pelias-api
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6.0-r5"}]}]
Chainguard
prism
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.3-r13"}]}]
Chainguard
pulumi-language-nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.229.0-r3"}]}]
Chainguard
rancher-api-ui
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-r8"}]}]
Chainguard
redisinsight
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-r4"}]}]
Chainguard
renovate
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.104.7-r1"}]}]
Chainguard
serve
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.6-r1"}]}]
Chainguard
sqlpad
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.7-r17"}]}]
Chainguard
tileserver-gl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-r11"}]}]
Chainguard
tileserver-gl-fips
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-r11"}]}]
Chainguard
vitess-22
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.4-r9"}]}]
Chainguard
wazuh-dashboard
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.4-r1"}]}]
Chainguard
wazuh-dashboard-dashboards-reporting
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.4-r1"}]}]
Wolfi
argo-workflows-ui-3.7
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.12-r2"}]}]
Wolfi
argo-workflows-ui-4.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-r2"}]}]
Wolfi
eslint
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.1.0-r1"}]}]
Wolfi
kubeflow-centraldashboard
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-r18"}]}]
Wolfi
langfuse-3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.164.0-r1"}]}]
Wolfi
langfuse-3-worker
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.164.0-r1"}]}]
Wolfi
lerna
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.7-r2"}]}]
Wolfi
npm
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.12.1-r0"}]}]
Wolfi
opensearch-dashboards-2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-r6"}]}]
Wolfi
opensearch-dashboards-2-dashboards-reporting
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-r6"}]}]
Wolfi
opensearch-dashboards-3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Wolfi
opensearch-dashboards-3-alerting-dashboards-plugin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Wolfi
opensearch-dashboards-3-anomaly-detection-dashboards-plugin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Wolfi
opensearch-dashboards-3-dashboards-maps
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Wolfi
opensearch-dashboards-3-dashboards-notifications
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Wolfi
opensearch-dashboards-3-dashboards-observability
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Wolfi
opensearch-dashboards-3-dashboards-query-workbench
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Wolfi
opensearch-dashboards-3-dashboards-reporting
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Wolfi
opensearch-dashboards-3-dashboards-search-relevance
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Wolfi
opensearch-dashboards-3-index-management-dashboards-plugin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Wolfi
opensearch-dashboards-3-ml-commons-dashboards
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Wolfi
opensearch-dashboards-3-security-analytics-dashboards-plugin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Wolfi
opensearch-dashboards-3-security-dashboards-plugin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r13"}]}]
Wolfi
prism
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.3-r13"}]}]
Wolfi
pulumi-language-nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.229.0-r3"}]}]
Wolfi
rancher-api-ui
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-r8"}]}]
Wolfi
renovate
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.104.7-r1"}]}]
Wolfi
serve
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.6-r1"}]}]
Wolfi
sqlpad
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.7-r17"}]}]
Wolfi
tileserver-gl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-r11"}]}]
Wolfi
vitess-22
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.4-r9"}]}]
Chainguard
saf
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r0"}]}]
Wolfi
saf
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r0"}]}]