Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.4
CGA-fg6p-2p3w-mw5m
published 5 days ago
Summary
No summary available.
What to do
- Update chainguard pixi to version 0.84.0-r0.
- Update wolfi pixi to version 0.84.0-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | pixi |
< 0.84.0-r0 Fix: upgrade to 0.84.0-r0
|
| Wolfi | wolfi | pixi |
< 0.84.0-r0 Fix: upgrade to 0.84.0-r0
|
Original advisory text
CGA-fg6p-2p3w-mw5m
References
- https://github.com/zip-rs/zip2/releases/tag/v9.0.0 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/115xxx/CVE-2026-1159... Vendor Advisory
- https://github.com/zip-rs/zip2/security/advisories/GHSA-hjqx-j4rw-g7xv Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-115908 Vendor Advisory
- https://github.com/zip-rs/zip2/commit/09c030eab56e8db8fb3c1c33f554407b30bad8fa Patch
Severity
7.4
High
Timeline
Published30 Oct 2026
Updated4 Nov 2026
First seen30 Oct 2026
Sources
CGA-fg6p-2p3w-mw5m · OSV
Track software like this
Free during beta