Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.1
CGA-fc4w-qm5x-333h
published 5 months ago
Summary
No summary available.
What to do
- Update chainguard act to version 0.2.88-r6.
- Update wolfi act to version 0.2.88-r6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | act |
< 0.2.88-r6 Fix: upgrade to 0.2.88-r6
|
| Wolfi | wolfi | act |
< 0.2.88-r6 Fix: upgrade to 0.2.88-r6
|
Original advisory text
CGA-fc4w-qm5x-333h
References
- https://go.dev/issue/79435 URL
- https://groups.google.com/g/golang-announce/c/a082jnz-LvI URL
- https://pkg.go.dev URL
- https://pkg.go.dev/vuln/GO-2026-5006 URL
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39832.json URL
- https://access.redhat.com/errata/RHSA-2026:35833 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-39832 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39832... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-39832 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2480685 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:36199 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:36319 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:36625 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:36648 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:36651 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:36796 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:36797 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:37072 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:37123 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:37271 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:37387 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:37410 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:40118 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:40262 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:40945 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:40972 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:41019 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:41031 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:41036 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:41066 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:42146 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:42796 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:43052 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:43692 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:49944 Vendor Advisory
- https://go.dev/cl/778640 URL
- https://go.dev/cl/778641 URL
- https://access.redhat.com/errata/RHSA-2026:52857 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:52910 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:57194 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:59579 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:61314 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:66521 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:67450 Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published27 May 2026
Updated5 Nov 2026
First seen5 Nov 2026
Sources
CGA-fc4w-qm5x-333h · OSV
Track software like this
Free during beta