← 戻る
CGA-h22v-g8h3-w59x
asciinema の脆弱性 (CGA-h22v-g8h3-w59x)
概要
asciinema に 脆弱性 (CGA-h22v-g8h3-w59x) が存在。不正な操作・情報露出のリスクがあります。対策: `3.2.0-r2` 以上に更新。
AI要約 snake-internal / snake-template-v1
対象製品という製品で、CGA-h22v-g8h3-w59x という番号がついた弱点 (脆弱性) が見つかりました。
重要度は「情報」。深刻度は低いか、まだ評価されていません。
あなた自身の対応としては、使っている製品やソフトを最新版に更新するのがいちばんの対策です。心配なら、システム担当者や製品の公式サイトで「対象製品 CGA-h22v-g8h3-w59x」を検索してください。
CGA-h22v-g8h3-w59x (対象製品)。重要度: 情報。
対応方針:
1. ベンダー公式アドバイザリで影響バージョン・修正版を確認
2. 該当バージョンが本番で稼働中なら、メンテ計画 (緊急度はKEV/CVSSで判断)
3. パッチ未提供時は WAF ルール・該当機能の無効化等で暫定回避
4. ログ・SIEMで該当CVEのIOC/PoCシグネチャを監視
詳細PoCや修正コミットは、当ページの『参照URL』および MITRE / NVD を参照してください。
❓ 何が問題か
対象製品 の弱点 (CGA-h22v-g8h3-w59x)。深刻なソフトウェア欠陥が見つかっています。
📍 影響範囲
対象製品 の対象バージョン (各ベンダーアドバイザリで確認)。本番環境で稼働中であれば直ちに影響範囲を確認してください。
🔥 重要度
重要度: 情報。深刻度は低いか、まだ評価されていません。
🔧 修正方法
ベンダー公式アドバイザリで提示された修正版に更新してください。
🛡️ 暫定回避
修正版がまだ提供されていない場合は、影響機能の無効化・WAFルール・ネットワークACLでの遮断・該当バージョンの隔離を検討してください。
🔍 検知方法
バージョン情報の確認、SBOMでの依存関係スキャン、SIEMでの該当CVEに関するIOC・PoCシグネチャ監視を実施してください。
対応アクション (7段階)
SOC/SREチームが順番に実行すべき具体的なステップとコマンド例
-
1影響範囲の特定 identify
grep -r 'asciinema' . | grep -v node_modulesリポジトリと本番環境の依存ファイル (package-lock.json / requirements.txt / go.sum / Gemfile.lock 等) で `asciinema` を grep し、稼働しているサービス・バージョンを把握する。
-
6パッチ適用 patch
Upgrade asciinema to 3.2.0-r2ステージング環境で 3.2.0-r2 に上げて回帰テスト → 本番反映。回帰テストはアプリの主要ハッピーパスと、Step 3 で見つけた異常検知の続報チェックを含めること。
-
7事後検証 verify
Confirm patched version is live in productionパッチ適用後、ステージングで PoC または同等の悪用パターンを再現して脆弱性が閉じたことを確認。本番では Step 3 と同じログクエリでアラート再発が無いか継続監視。
影響パッケージ
Chainguard
asciinema
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-r2"}]}]
Chainguard
atuin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.13.4-r1"}]}]
Chainguard
berg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-r6"}]}]
Chainguard
buck2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260315-r4"}]}]
Chainguard
cargo-audit
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.1-r5"}]}]
Chainguard
fnm
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39.0-r3"}]}]
Chainguard
garage-1
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-r5"}]}]
Chainguard
garage-2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-r2"}]}]
Chainguard
garage-2.2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-r3"}]}]
Chainguard
komodo-cli
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]
Chainguard
komodo-core
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]
Chainguard
komodo-periphery
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-r0"}]}]
Chainguard
linkerd-extension-init
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.10-r0"}]}]
Chainguard
linkerd-network-validator
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.8-r0"}]}]
Chainguard
linkerd2-cni-repair-controller
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.6-r3"}]}]
Chainguard
linkerd2-controller
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.3.3-r1"}]}]
Chainguard
linkerd2-proxy
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.346.0-r0"}]}]
Chainguard
lychee
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-r7"}]}]
Chainguard
mise
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.3.17-r0"}]}]
Chainguard
ntpd-rs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-r5"}]}]
Chainguard
nushell
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.111.0-r6"}]}]
Chainguard
nushell-plugins
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.111.0-r6"}]}]
Chainguard
oranda
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.5-r15"}]}]
Chainguard
parseable
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.5-r0"}]}]
Chainguard
pgcat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-r11"}]}]
Chainguard
pixi
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66.0-r3"}]}]
Chainguard
py3.10-hf-xet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-r1"}]}]
Chainguard
py3.11-hf-xet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-r1"}]}]
Chainguard
py3.12-hf-xet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-r1"}]}]
Chainguard
py3.13-hf-xet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-r1"}]}]
Chainguard
rustls-ffi
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1-r0"}]}]
Chainguard
rustup
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.0-r1"}]}]
Chainguard
rye
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-r8"}]}]
Chainguard
samply
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1-r14"}]}]
Chainguard
sdp-identity-service
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-r3"}]}]
Chainguard
sdp-k8s-injector
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-r3"}]}]
Chainguard
sentry-cli
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.4-r1"}]}]
Chainguard
shadowsocks-rust-sslocal
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r4"}]}]
Chainguard
shadowsocks-rust-ssmanager
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r4"}]}]
Chainguard
shadowsocks-rust-ssserver
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r4"}]}]
Chainguard
shadowsocks-rust-ssservice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r4"}]}]
Chainguard
shadowsocks-rust-ssurl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r4"}]}]
Chainguard
tealdeer
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r3"}]}]
Chainguard
uv
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.12-r1"}]}]
Chainguard
wasm-pack
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r4"}]}]
Chainguard
wasmcloud
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-r0"}]}]
Chainguard
wasmtime
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"44.0.0-r0"}]}]
Chainguard
xh
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.3-r6"}]}]
Chainguard
zellij
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-r0"}]}]
Chainguard
zizmor
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.1-r5"}]}]
Chainguard
zola
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.1-r4"}]}]
Chainguard
ztunnel-1.28
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.5-r3"}]}]
Chainguard
ztunnel-1.29
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.1-r8"}]}]
Chainguard
ztunnel-fips-1.28
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.5-r1"}]}]
Chainguard
ztunnel-fips-1.29
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.1-r1"}]}]
Wolfi
atuin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.13.4-r1"}]}]
Wolfi
berg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-r6"}]}]
Wolfi
buck2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260315-r4"}]}]
Wolfi
cargo-audit
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.1-r5"}]}]
Wolfi
linkerd-extension-init
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.10-r0"}]}]
Wolfi
linkerd-network-validator
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.8-r0"}]}]
Wolfi
linkerd2-controller
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.3.3-r1"}]}]
Wolfi
linkerd2-proxy
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.346.0-r0"}]}]
Wolfi
lychee
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-r7"}]}]
Wolfi
ntpd-rs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-r5"}]}]
Wolfi
nushell
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.111.0-r6"}]}]
Wolfi
nushell-plugins
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.111.0-r6"}]}]
Wolfi
oranda
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.5-r15"}]}]
Wolfi
parseable
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.5-r0"}]}]
Wolfi
pgcat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-r11"}]}]
Wolfi
pixi
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66.0-r3"}]}]
Wolfi
py3.10-hf-xet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-r1"}]}]
Wolfi
py3.11-hf-xet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-r1"}]}]
Wolfi
py3.12-hf-xet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-r1"}]}]
Wolfi
py3.13-hf-xet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-r1"}]}]
Wolfi
rustls-ffi
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1-r0"}]}]
Wolfi
rustup
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.0-r1"}]}]
Wolfi
rye
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-r8"}]}]
Wolfi
samply
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1-r14"}]}]
Wolfi
sdp-identity-service
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-r3"}]}]
Wolfi
sdp-k8s-injector
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-r3"}]}]
Wolfi
shadowsocks-rust-sslocal
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r4"}]}]
Wolfi
shadowsocks-rust-ssmanager
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r4"}]}]
Wolfi
shadowsocks-rust-ssserver
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r4"}]}]
Wolfi
shadowsocks-rust-ssservice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r4"}]}]
Wolfi
shadowsocks-rust-ssurl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r4"}]}]
Wolfi
tealdeer
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r3"}]}]
Wolfi
uv
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.12-r1"}]}]
Wolfi
wasm-pack
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r4"}]}]
Wolfi
wasmcloud
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-r0"}]}]
Wolfi
wasmtime
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"44.0.0-r0"}]}]
Wolfi
xh
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.3-r6"}]}]
Wolfi
zellij
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-r0"}]}]
Wolfi
zizmor
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.1-r5"}]}]
Wolfi
zola
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.1-r4"}]}]
Wolfi
ztunnel-1.28
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.5-r3"}]}]
Wolfi
ztunnel-1.29
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.1-r8"}]}]
Chainguard
sccache
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-r1"}]}]
Chainguard
sqlx
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.6-r6"}]}]
Chainguard
zed
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-r0"}]}]
Wolfi
sccache
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-r1"}]}]
Wolfi
sqlx
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.6-r6"}]}]
Wolfi
zed
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-r0"}]}]
Chainguard
kdash
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-r2"}]}]
Wolfi
kdash
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-r2"}]}]
Chainguard
deno
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.3-r0"}]}]
Chainguard
qdrant
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-r0"}]}]
Wolfi
deno
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.3-r0"}]}]
Wolfi
qdrant
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.0-r0"}]}]