Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CGA-fwp2-8fv5-5wgx

published 5 months ago

Summary

No summary available.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Ecosystem	Vendor	Product	Affected versions
Chainguard	chainguard	kubernetes-csi-external-provisioner	All versions
Wolfi	wolfi	kubernetes-csi-external-provisioner	All versions

Original advisory text

CGA-fwp2-8fv5-5wgx

References

https://go.dev/issue/79435 URL
https://groups.google.com/g/golang-announce/c/a082jnz-LvI URL
https://pkg.go.dev URL
https://pkg.go.dev/vuln/GO-2026-5006 URL
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39832.json URL
https://access.redhat.com/errata/RHSA-2026:35833 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-39832 Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39832... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-39832 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2480685 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:36199 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36319 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36625 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36648 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36651 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36796 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36797 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37072 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37123 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37271 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37387 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37410 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40118 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40262 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40945 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40972 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41019 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41031 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41036 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41066 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42146 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42796 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:43052 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:43692 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:49944 Vendor Advisory
https://go.dev/cl/778640 URL
https://go.dev/cl/778641 URL
https://access.redhat.com/errata/RHSA-2026:52857 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:52910 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57194 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:59579 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:61314 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66521 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:67450 Vendor Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.1 Critical

Timeline

Published27 May 2026

Updated5 Nov 2026

First seen5 Nov 2026

Sources

CGA-fwp2-8fv5-5wgx · OSV

Track software like this

Free during beta