Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
CGA-f6w2-9vj5-gvhh
published 29 days ago
Summary
No summary available.
What to do
- Update chainguard openstack-barbican-2025.2 to version 21.0.0_git20260928-r4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | openstack-barbican-2025.2 |
< 21.0.0_git20260928-r4 Fix: upgrade to 21.0.0_git20260928-r4
|
Original advisory text
CGA-f6w2-9vj5-gvhh
References
- https://github.com/sqlalchemy/mako/releases/tag/rel_1_4_2 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-1029... Vendor Advisory
- https://github.com/sqlalchemy/mako/security/advisories/GHSA-5639-2j2p-m4mx Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-102991 Vendor Advisory
- https://github.com/sqlalchemy/mako/issues/441 Third Party Advisory
- https://github.com/sqlalchemy/mako/commit/000ed85e4e48771eff460bf4fc721fb43de80e... Patch
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published6 Oct 2026
Updated7 Oct 2026
First seen7 Oct 2026
Sources
CGA-f6w2-9vj5-gvhh · OSV
Track software like this
Free during beta