Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.3
CGA-8wvx-pwx8-hjph
published 7 days ago
Summary
No summary available.
What to do
- Update chainguard go-getter-2-fips to version 2.2.6-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | go-getter-2-fips |
< 2.2.6-r2 Fix: upgrade to 2.2.6-r2
|
Original advisory text
CGA-8wvx-pwx8-hjph
References
- https://github.com/klauspost/compress/releases/tag/v1.20.2 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/116xxx/CVE-2026-1165... Vendor Advisory
- https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-116591 Vendor Advisory
- https://github.com/klauspost/compress/commit/7f5d8528720c895a6106f201719f87eb030... Patch
Severity
8.3
High
Timeline
Published6 Nov 2026
Updated7 Nov 2026
First seen6 Nov 2026
Sources
CGA-8wvx-pwx8-hjph · OSV
Track software like this
Free during beta