Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CGA-frjg-g39j-8vm7

published 5 months ago

Summary

No summary available.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Ecosystem	Vendor	Product	Affected versions
Chainguard	chainguard	vault-secrets-webhook	All versions
Wolfi	wolfi	vault-secrets-webhook	All versions

Original advisory text

CGA-frjg-g39j-8vm7

References

https://go.dev/cl/781220 URL
https://go.dev/issue/79568 URL
https://groups.google.com/g/golang-announce/c/a082jnz-LvI URL
https://pkg.go.dev URL
https://pkg.go.dev/vuln/GO-2026-5021 URL
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42508.json URL
https://access.redhat.com/errata/RHSA-2026:23262 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:23264 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:26546 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:26547 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:35833 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-42508 Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42508... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-42508 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2480688 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:36648 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36651 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36796 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36797 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36808 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37072 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37123 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37387 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40118 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40262 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40945 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41019 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41031 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41036 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41064 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41066 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42146 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42796 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:43052 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:43692 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:46885 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:47735 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:47737 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:49944 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51033 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51288 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:52857 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:52910 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:54400 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57194 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:59467 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60520 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:61314 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:65126 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66022 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66521 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:67450 Vendor Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.1 Critical

Timeline

Published29 May 2026

Updated5 Nov 2026

First seen5 Nov 2026

Sources

CGA-frjg-g39j-8vm7 · OSV

Track software like this

Free during beta