Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CGA-g9g7-j6p4-x7ch

published 6 months ago

Summary

No summary available.

What to do

Update chainguard gitaly-backup-18.9 to version 18.9.7-r1.
Update wolfi gitaly-backup-18.9 to version 18.9.7-r1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Chainguard	chainguard	gitaly-backup-18.9	< 18.9.7-r1 Fix: upgrade to 18.9.7-r1
Wolfi	wolfi	gitaly-backup-18.9	< 18.9.7-r1 Fix: upgrade to 18.9.7-r1

Original advisory text

CGA-g9g7-j6p4-x7ch

References

https://go.dev/cl/761581 URL
https://go.dev/cl/761640 URL
https://go.dev/issue/78476 URL
https://groups.google.com/g/golang-announce/c/qcCIEXso47M URL
https://pkg.go.dev URL
https://pkg.go.dev/vuln/GO-2026-4918 URL
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33814.json URL
https://access.redhat.com/errata/RHSA-2026:23262 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:23264 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33120 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33123 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33142 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33150 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:34342 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-33814 Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33814... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-33814 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2467815 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:37387 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42644 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:43692 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:50205 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:54274 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:54283 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:54284 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:54285 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:54286 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:54287 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57191 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57194 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:22112 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:22120 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:22121 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:49702 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:49712 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57365 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57367 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57545 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57649 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57845 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:56854 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:56912 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57408 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60520 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:61253 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60441 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60442 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60477 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60478 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60668 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60446 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60447 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60454 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:59833 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60025 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60023 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:63046 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:63047 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:63048 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:63091 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:63096 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:63097 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:63103 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:63104 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:63636 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:63637 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:63639 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:65126 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:62550 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:62551 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:63050 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:62410 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66350 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Timeline

Published8 May 2026

Updated5 Nov 2026

First seen5 Nov 2026

Sources

CGA-g9g7-j6p4-x7ch · OSV

Track software like this

Free during beta