← Back
CGA-vgfm-4x3c-36fm
CGA-vgfm-4x3c-36fm
AI summary snake-internal / snake-template-v1
A weakness called CGA-vgfm-4x3c-36fm was discovered in the affected product.
Severity is Info. Low severity or not yet rated.
What you should do: update the affected software to the latest version. If unsure, ask your IT team or search the vendor's site for "the product CGA-vgfm-4x3c-36fm".
CGA-vgfm-4x3c-36fm (the affected product). Severity: Info.
Response plan:
1. Check the vendor advisory for affected versions and the patched release.
2. If a vulnerable version is running in production, schedule maintenance (urgency from KEV/CVSS).
3. If no patch yet, mitigate via WAF rule, disabling the affected feature, etc.
4. Monitor logs / SIEM for known IOC and PoC signatures of this CVE.
PoCs and fix commits: see the 'References' section, MITRE, and NVD.
❓ What is the problem
A weakness (CGA-vgfm-4x3c-36fm) in the affected product. A serious software flaw has been identified.
📍 Affected scope
Target versions of the affected product (see vendor advisory). If running in production, identify exposure immediately.
🔥 Severity
Severity: Info. Low severity or not yet rated.
🔧 How to fix
Update to the patched release as listed in the vendor advisory.
🛡️ Workaround
If a patch is not yet available, consider disabling the affected feature, applying WAF rules, blocking via network ACLs, or isolating the vulnerable version.
🔍 Detection
Check version information, scan dependencies via SBOM, and monitor SIEM for IOC and PoC signatures related to this CVE.
Affected packages
Chainguard
apache-hop
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-r9"}]}]
Chainguard
apache-nifi
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r3"}]}]
Chainguard
apache-pulsar-4.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]
Chainguard
apache-pulsar-4.2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r0"}]}]
Chainguard
commercial-elasticsearch-8.19
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.15-r0"}]}]
Chainguard
druid
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"36.0.0-r15"}]}]
Chainguard
elasticsearch-7
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.29-r12"}]}]
Chainguard
elasticsearch-7-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.29-r12"}]}]
Chainguard
elasticsearch-8.17
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r21"}]}]
Chainguard
elasticsearch-8.19
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.14-r2"}]}]
Chainguard
elasticsearch-8.19-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.14-r2"}]}]
Chainguard
elasticsearch-9.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r10"}]}]
Chainguard
elasticsearch-9.0-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r10"}]}]
Chainguard
elasticsearch-9.1
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.10-r4"}]}]
Chainguard
elasticsearch-9.1-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.10-r4"}]}]
Chainguard
elasticsearch-9.2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r2"}]}]
Chainguard
elasticsearch-9.2-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r2"}]}]
Chainguard
elasticsearch-9.3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.3-r2"}]}]
Chainguard
elasticsearch-9.3-iamguarded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.3-r2"}]}]
Chainguard
geoserver-2.27
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.5-r5"}]}]
Chainguard
geoserver-2.28
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.3-r3"}]}]
Chainguard
ghidra
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4-r2"}]}]
Chainguard
gradle-8
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.4-r4"}]}]
Chainguard
gradle-9
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.1-r2"}]}]
Chainguard
jenkins-2-openjdk-21
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.560-r0"}]}]
Chainguard
jenkins-2-openjdk-25
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.560-r0"}]}]
Chainguard
kayenta-2025.4
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.4.3-r7"}]}]
Chainguard
kayenta-2026.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.0.2-r7"}]}]
Chainguard
kayenta-fips-2025.4
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.4.3-r8"}]}]
Chainguard
kayenta-fips-2026.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.0.2-r8"}]}]
Chainguard
kserve-modelmesh
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-r31"}]}]
Chainguard
spark-4.0-scala-2.13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r11"}]}]
Chainguard
wildfly-openjdk-17
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"39.0.1-r5"}]}]
Chainguard
wildfly-openjdk-21
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"39.0.1-r5"}]}]
Wolfi
apache-nifi
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r3"}]}]
Wolfi
apache-pulsar-4.2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r0"}]}]
Wolfi
druid
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"36.0.0-r15"}]}]
Wolfi
gradle-8
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.4-r4"}]}]
Wolfi
gradle-9
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.1-r2"}]}]
Wolfi
jenkins-2-openjdk-21
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.560-r0"}]}]
Wolfi
jenkins-2-openjdk-25
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.560-r0"}]}]
Wolfi
kserve-modelmesh
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-r31"}]}]
Wolfi
spark-4.0-scala-2.13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r11"}]}]
Wolfi
wildfly-openjdk-17
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"39.0.1-r5"}]}]
Wolfi
wildfly-openjdk-21
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"39.0.1-r5"}]}]
Chainguard
keycloak-26.6
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.6.1-r4"}]}]
Chainguard
keycloak-26.6-iamguarded-compat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.6.1-r4"}]}]
Chainguard
opensearch-2-security
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r14"}]}]
Wolfi
keycloak-26.6
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.6.1-r4"}]}]
Wolfi
keycloak-26.6-iamguarded-compat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.6.1-r4"}]}]
Wolfi
opensearch-2-security
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r14"}]}]
Chainguard
jruby-10.1
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.1.0.0-r1"}]}]
Chainguard
jruby-9.4
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.14.0-r5"}]}]
Chainguard
ruby3.2-bouncy-castle-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0146.1-r8"}]}]
Chainguard
ruby3.3-bouncy-castle-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0146.1-r6"}]}]
Chainguard
ruby3.4-bouncy-castle-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0146.1-r7"}]}]
Chainguard
ruby4.0-bouncy-castle-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0146.1-r3"}]}]
Wolfi
jruby-10.1
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.1.0.0-r1"}]}]
Wolfi
jruby-9.4
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.14.0-r5"}]}]
Wolfi
ruby3.2-bouncy-castle-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0146.1-r8"}]}]
Wolfi
ruby3.3-bouncy-castle-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0146.1-r6"}]}]
Wolfi
ruby3.4-bouncy-castle-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0146.1-r7"}]}]
Wolfi
ruby4.0-bouncy-castle-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0146.1-r3"}]}]
Chainguard
wso2is
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.0-r0"}]}]
Chainguard
commercial-elasticsearch-9.3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.5-r0"}]}]
Chainguard
jenkins-2.555
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.555.2-r3"}]}]
Chainguard
jenkins-2.555-openjdk-21
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.555.2-r3"}]}]
Chainguard
jenkins-2.555-openjdk-25
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.555.2-r3"}]}]
Chainguard
thingsboard-tb-mqtt-transport
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1.2-r0"}]}]
Chainguard
thingsboard-tb-node
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1.2-r0"}]}]
Wolfi
thingsboard-tb-mqtt-transport
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1.2-r0"}]}]
Wolfi
thingsboard-tb-node
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1.2-r0"}]}]