🛡️ CGA-8x53-pqv6-wqhw — act

⚪ Unknown ✅ No Known Exploit OSV
N/A
CVSS Score
0 Low4 Medium7 High9 Critical10

Affected software

CGA-8x53-pqv6-wqhw is recorded against 198 packages.

  • act (fixed in 0.2.88-r3)
  • amazon-ssm-agent (fixed in 3.3.4364.0-r1)
  • amazon-ssm-agent-ecs-exec (fixed in 3.3.4364.0-r1)
  • amazon-ssm-agent-fips (fixed in 3.3.3270.0-r17)
  • apko (fixed in 1.2.12-r1)
  • apko-fips (fixed in 1.2.10-r2)
  • argo-cd-3.1 (fixed in 3.1.16-r3)
  • argo-cd-3.1-compat (fixed in 3.1.16-r3)
  • argo-cd-3.2 (fixed in 3.2.12-r1)
  • argo-cd-3.2-compat (fixed in 3.2.12-r1)
  • argo-cd-3.3 (fixed in 3.3.9-r4)
  • argo-cd-fips-3.1 (fixed in 3.1.16-r1)
  • argo-cd-fips-3.1-compat (fixed in 3.1.16-r1)
  • argo-cd-fips-3.2 (fixed in 3.2.11-r2)
  • argo-cd-fips-3.3 (fixed in 3.3.10-r2)
  • argo-cd-fips-3.3-compat (fixed in 3.3.10-r2)
  • argo-cd-fips-3.4 (fixed in 3.4.2-r2)
  • argo-cd-fips-3.4-compat (fixed in 3.4.2-r2)
  • argo-events (fixed in 1.9.10-r20)
  • argo-events-fips (fixed in 1.9.10-r14)
  • argo-workflow-executor-4.0 (fixed in 4.0.5-r4)
  • argo-workflow-executor-fips-3.7 (fixed in 3.7.14-r3)
  • argo-workflow-executor-fips-4.0 (fixed in 4.0.5-r4)
  • argo-workflows-3.7 (fixed in 3.7.14-r3)
Show the remaining 174 packages
  • argo-workflows-4.0 (fixed in 4.0.5-r4)
  • argo-workflows-fips-3.7 (fixed in 3.7.14-r3)
  • argo-workflows-fips-4.0 (fixed in 4.0.5-r4)
  • argocd-image-updater (fixed in 1.2.0-r3)
  • argocd-image-updater-fips (fixed in 1.2.0-r4)
  • bom (fixed in 0.7.1-r19)
  • cerbos (fixed in 0.53.0-r2)
  • cerbos-fips (fixed in 0.51.0-r16)
  • cerbosctl (fixed in 0.53.0-r2)
  • cg (fixed in 0.2.260-r1)
  • chainctl (fixed in 0.2.259-r1)
  • chainctl-fips (fixed in 0.2.259-r1)
  • chainloop-cli (fixed in 1.96.2-r1)
  • chainloop-cli-fips (fixed in 1.96.2-r0)
  • cloudbeat-8.17 (fixed in 8.17.10-r19)
  • cloudbeat-8.19 (fixed in 8.19.15-r1)
  • cloudbeat-9.0 (fixed in 9.0.8-r22)
  • cloudbeat-9.1 (fixed in 9.1.10-r14)
  • cloudbeat-9.2 (fixed in 9.2.8-r2)
  • cloudbeat-9.3 (fixed in 9.3.4-r4)
  • cloudbeat-9.4 (fixed in 9.4.0-r3)
  • cloudbeat-fips-8.17 (fixed in 8.17.10-r24)
  • cloudbeat-fips-8.19 (fixed in 8.19.15-r0)
  • cloudbeat-fips-9.0 (fixed in 9.0.8-r25)
  • cloudbeat-fips-9.1 (fixed in 9.1.10-r18)
  • cloudbeat-fips-9.2 (fixed in 9.2.8-r1)
  • cloudbeat-fips-9.3 (fixed in 9.3.4-r2)
  • cloudbeat-fips-9.4 (fixed in 9.4.0-r5)
  • coder (fixed in 2.32.2-r0)
  • coder-fips (fixed in 2.32.1-r2)
  • crossplane-1.20-crank (fixed in 1.20.7-r3)
  • crossplane-2.0-crank (fixed in 2.0.8-r2)
  • crossplane-2.1-crank (fixed in 2.1.5-r3)
  • crossplane-2.2-crank (fixed in 2.2.1-r2)
  • crossplane-fips-1.20-crank (fixed in 1.20.7-r3)
  • crossplane-fips-2.0-crank (fixed in 2.0.8-r2)
  • crossplane-fips-2.1-crank (fixed in 2.1.5-r3)
  • crossplane-fips-2.2-crank (fixed in 2.2.1-r3)
  • dagger (fixed in 0.20.8-r4)
  • external-secrets-operator-2.0 (fixed in 2.0.1-r12)
  • external-secrets-operator-2.1 (fixed in 2.1.0-r6)
  • external-secrets-operator-2.2 (fixed in 2.2.0-r9)
  • external-secrets-operator-2.3 (fixed in 2.3.0-r7)
  • external-secrets-operator-2.4 (fixed in 2.4.1-r3)
  • external-secrets-operator-fips-2.0 (fixed in 2.0.1-r12)
  • external-secrets-operator-fips-2.1 (fixed in 2.1.0-r11)
  • external-secrets-operator-fips-2.2 (fixed in 2.2.0-r9)
  • external-secrets-operator-fips-2.3 (fixed in 2.3.0-r5)
  • external-secrets-operator-fips-2.4 (fixed in 2.4.1-r2)
  • flux-2.5 (fixed in 2.5.1-r26)
  • flux-2.6 (fixed in 2.6.4-r24)
  • flux-2.7 (fixed in 2.7.5-r17)
  • flux-2.8 (fixed in 2.8.7-r1)
  • flux-fips-2.5 (fixed in 2.5.1-r24)
  • flux-fips-2.6 (fixed in 2.6.4-r21)
  • flux-fips-2.7 (fixed in 2.7.5-r18)
  • flux-fips-2.8 (fixed in 2.8.6-r4)
  • flux-image-automation-controller (fixed in 1.1.3-r0)
  • flux-source-controller (fixed in 1.8.2-r10)
  • gitaly-18.10 (fixed in 18.10.6-r2)
  • gitaly-18.11 (fixed in 18.11.2-r2)
  • gitaly-18.9 (fixed in 18.9.7-r2)
  • gitaly-fips-18.10 (fixed in 18.10.5-r1)
  • gitaly-fips-18.11 (fixed in 18.11.2-r6)
  • gitaly-fips-18.9 (fixed in 18.9.6-r4)
  • gitea (fixed in 1.25.5-r9)
  • gitea-fips (fixed in 1.25.5-r8)
  • gitlab-rails-ce-18.1 (fixed in 18.1.6-r12)
  • gitlab-rails-ce-18.10 (fixed in 18.10.6-r1)
  • gitlab-rails-ce-18.11 (fixed in 18.11.2-r3)
  • gitlab-rails-ce-18.4 (fixed in 18.4.6-r5)
  • gitlab-rails-ce-18.9 (fixed in 18.9.7-r1)
  • gitlab-rails-ce-fips-18.1 (fixed in 18.1.6-r12)
  • gitlab-rails-ce-fips-18.10 (fixed in 18.10.6-r1)
  • gitlab-rails-ce-fips-18.11 (fixed in 18.11.3-r1)
  • gitlab-rails-ce-fips-18.9 (fixed in 18.9.7-r1)
  • gitlab-runner-18.11 (fixed in 18.11.3-r1)
  • gitlab-runner-fips-18.10 (fixed in 18.10.1-r9)
  • gitlab-runner-fips-18.11 (fixed in 18.11.3-r2)
  • gitlab-runner-helper-18.10 (fixed in 18.10.1-r8)
  • gitlab-runner-helper-18.11 (fixed in 18.11.3-r1)
  • gitlab-runner-helper-18.9 (fixed in 18.9.0-r12)
  • gitlab-runner-helper-fips-18.10 (fixed in 18.10.1-r9)
  • gitlab-runner-helper-fips-18.11 (fixed in 18.11.3-r1)
  • gitlab-runner-helper-fips-18.9 (fixed in 18.9.0-r13)
  • gitsign (fixed in 0.16.0-r2)
  • gomplate-4 (fixed in 4.3.3-r14)
  • gomplate-5 (fixed in 5.1.0-r3)
  • gomplate-fips-4 (fixed in 4.3.3-r13)
  • gomplate-fips-5 (fixed in 5.1.0-r2)
  • google-osconfig-agent (fixed in 20251028.00-r17)
  • goreleaser (fixed in 2.15.4-r3)
  • gptscript (fixed in 0.9.9-r127)
  • grafana-12.1 (fixed in 12.1.10.01-r8)
  • grafana-alloy (fixed in 1.15.1-r6)
  • grafana-alloy-fips (fixed in 1.15.1-r5)
  • grafana-fips-12.1 (fixed in 12.1.10.01-r6)
  • grype (fixed in 0.112.0-r2)
  • grype-db (fixed in 0.53.3-r2)
  • grype-fips (fixed in 0.112.0-r2)
  • guac (fixed in 1.1.0-r10)
  • guacone (fixed in 1.1.0-r10)
  • jfrog-cli (fixed in 2.103.0-r2)
  • k9s (fixed in 0.50.18-r24)
  • k9s-fips (fixed in 0.50.18-r18)
  • kaniko (fixed in 1.25.14-r2)
  • kaniko-fips (fixed in 1.25.14-r2)
  • kargo (fixed in 1.10.3-r1)
  • kots (fixed in 1.130.2-r3)
  • kubescape (fixed in 4.0.8-r2)
  • kubescape-server (fixed in 4.0.8-r2)
  • kubescape-server-fips (fixed in 4.0.8-r3)
  • kubevela-vela-cli (fixed in 1.10.8-r6)
  • kubevela-vela-cli-fips (fixed in 1.10.8-r7)
  • kubevela-vela-core (fixed in 1.10.8-r6)
  • kyverno-cli-1.15 (fixed in 1.15.3-r18)
  • kyverno-cli-1.16 (fixed in 1.16.4-r4)
  • kyverno-cli-1.17 (fixed in 1.17.2-r5)
  • kyverno-cli-1.18 (fixed in 1.18.0-r3)
  • kyverno-cli-fips-1.15 (fixed in 1.15.20-r3)
  • kyverno-cli-fips-1.16 (fixed in 1.16.4-r3)
  • kyverno-cli-fips-1.17 (fixed in 1.17.2-r4)
  • kyverno-cli-fips-1.18 (fixed in 1.18.0-r3)
  • mapotf (fixed in 0.0.0_git20260426-r2)
  • mapotf-fips (fixed in 0.0.0_git20260426-r1)
  • melange (fixed in 0.50.6-r1)
  • nemo (fixed in 2.7.3-r4)
  • nfpm (fixed in 2.46.3-r2)
  • nuclei (fixed in 3.8.0-r6)
  • osv-scanner (fixed in 2.3.8-r1)
  • packer (fixed in 1.15.3-r3)
  • packer-fips (fixed in 1.15.3-r4)
  • pulumi (fixed in 3.238.0-r0)
  • pulumi-kubernetes-operator (fixed in 2.7.0-r5)
  • pulumi-language-dotnet (fixed in 3.106.1-r2)
  • pulumi-language-go (fixed in 3.238.0-r0)
  • pulumi-language-java (fixed in 1.27.0-r0)
  • pulumi-language-nodejs (fixed in 3.238.0-r0)
  • pulumi-language-python (fixed in 3.238.0-r0)
  • pulumi-language-yaml (fixed in 1.33.1-r1)
  • rancher-fleet-cli (fixed in 0.15.1-r3)
  • rancher-fleet-cli-fips (fixed in 0.15.1-r3)
  • rancher-fleet-controller (fixed in 0.15.1-r3)
  • rancher-fleet-controller-fips (fixed in 0.15.1-r3)
  • redpanda-console (fixed in 3.7.2-r3)
  • scorecard (fixed in 5.5.0-r3)
  • skaffold (fixed in 2.19.0-r3)
  • skaffold-fips (fixed in 2.20.0-r0)
  • snyk-cli (fixed in 1.1304.2-r3)
  • src-fingerprint (fixed in 0.19.0-r50)
  • src-fingerprint-fips (fixed in 0.19.0-r33)
  • steampipe (fixed in 2.4.2-r4)
  • syft (fixed in 1.44.0-r3)
  • syft-fips (fixed in 1.44.0-r2)
  • teleport-17 (fixed in 17.7.24-r0)
  • teleport-18 (fixed in 18.8.0-r1)
  • teleport-18.6 (fixed in 18.6.8-r17)
  • terragrunt (fixed in 1.1.0-r0)
  • terragrunt-fips (fixed in 1.0.1-r3)
  • tfsec (fixed in 1.28.14-r32)
  • trivy (fixed in 0.69.3-r15)
  • trivy-fips (fixed in 0.69.3-r9)
  • trivy-operator (fixed in 0.30.1-r9)
  • trivy-operator-fips (fixed in 0.30.1-r7)
  • trufflehog (fixed in 3.94.3-r7)
  • trufflehog-fips (fixed in 3.94.3-r5)
  • upwind-agent (fixed in 0.130.0-r0)
  • witness (fixed in 0.11.0-r3)
  • wolfictl (fixed in 0.39.15-r1)
  • xeol (fixed in 0.10.8-r39)
  • xeol-fips (fixed in 0.10.8-r39)
  • zarf (fixed in 0.75.1-r2)
  • zarf-fips (fixed in 0.75.1-r3)
  • zot (fixed in 2.1.16-r5)

Timeline and source

Published on 12 May 2026 and last revised on 9 August 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

Details

Severity Unknown
CVSS Score N/A
CVSS Vector N/A
CWE N/A
Public Exploit ✅ No
Source OSV
Published 2026-05-12
Updated 2026-08-20
Modified 2026-08-09
Fix URL N/A

Affected Packages

Software From version Fixed in
act 0.2.88-r3
amazon-ssm-agent 3.3.4364.0-r1
amazon-ssm-agent-ecs-exec 3.3.4364.0-r1
amazon-ssm-agent-fips 3.3.3270.0-r17
apko 1.2.12-r1
apko-fips 1.2.10-r2
argo-cd-3.1 3.1.16-r3
argo-cd-3.1-compat 3.1.16-r3
argo-cd-3.2 3.2.12-r1
argo-cd-3.2-compat 3.2.12-r1
argo-cd-3.3 3.3.9-r4
argo-cd-fips-3.1 3.1.16-r1
argo-cd-fips-3.1-compat 3.1.16-r1
argo-cd-fips-3.2 3.2.11-r2
argo-cd-fips-3.3 3.3.10-r2
argo-cd-fips-3.3-compat 3.3.10-r2
argo-cd-fips-3.4 3.4.2-r2
argo-cd-fips-3.4-compat 3.4.2-r2
argo-events 1.9.10-r20
argo-events-fips 1.9.10-r14
argo-workflow-executor-4.0 4.0.5-r4
argo-workflow-executor-fips-3.7 3.7.14-r3
argo-workflow-executor-fips-4.0 4.0.5-r4
argo-workflows-3.7 3.7.14-r3
argo-workflows-4.0 4.0.5-r4
argo-workflows-fips-3.7 3.7.14-r3
argo-workflows-fips-4.0 4.0.5-r4
argocd-image-updater 1.2.0-r3
argocd-image-updater-fips 1.2.0-r4
bom 0.7.1-r19
cerbos 0.53.0-r2
cerbos-fips 0.51.0-r16
cerbosctl 0.53.0-r2
cg 0.2.260-r1
chainctl 0.2.259-r1
chainctl-fips 0.2.259-r1
chainloop-cli 1.96.2-r1
chainloop-cli-fips 1.96.2-r0
cloudbeat-8.17 8.17.10-r19
cloudbeat-8.19 8.19.15-r1
cloudbeat-9.0 9.0.8-r22
cloudbeat-9.1 9.1.10-r14
cloudbeat-9.2 9.2.8-r2
cloudbeat-9.3 9.3.4-r4
cloudbeat-9.4 9.4.0-r3
cloudbeat-fips-8.17 8.17.10-r24
cloudbeat-fips-8.19 8.19.15-r0
cloudbeat-fips-9.0 9.0.8-r25
cloudbeat-fips-9.1 9.1.10-r18
cloudbeat-fips-9.2 9.2.8-r1
cloudbeat-fips-9.3 9.3.4-r2
cloudbeat-fips-9.4 9.4.0-r5
coder 2.32.2-r0
coder-fips 2.32.1-r2
crossplane-1.20-crank 1.20.7-r3
crossplane-2.0-crank 2.0.8-r2
crossplane-2.1-crank 2.1.5-r3
crossplane-2.2-crank 2.2.1-r2
crossplane-fips-1.20-crank 1.20.7-r3
crossplane-fips-2.0-crank 2.0.8-r2
crossplane-fips-2.1-crank 2.1.5-r3
crossplane-fips-2.2-crank 2.2.1-r3
dagger 0.20.8-r4
external-secrets-operator-2.0 2.0.1-r12
external-secrets-operator-2.1 2.1.0-r6
external-secrets-operator-2.2 2.2.0-r9
external-secrets-operator-2.3 2.3.0-r7
external-secrets-operator-2.4 2.4.1-r3
external-secrets-operator-fips-2.0 2.0.1-r12
external-secrets-operator-fips-2.1 2.1.0-r11
external-secrets-operator-fips-2.2 2.2.0-r9
external-secrets-operator-fips-2.3 2.3.0-r5
external-secrets-operator-fips-2.4 2.4.1-r2
flux-2.5 2.5.1-r26
flux-2.6 2.6.4-r24
flux-2.7 2.7.5-r17
flux-2.8 2.8.7-r1
flux-fips-2.5 2.5.1-r24
flux-fips-2.6 2.6.4-r21
flux-fips-2.7 2.7.5-r18
flux-fips-2.8 2.8.6-r4
flux-image-automation-controller 1.1.3-r0
flux-source-controller 1.8.2-r10
gitaly-18.10 18.10.6-r2
gitaly-18.11 18.11.2-r2
gitaly-18.9 18.9.7-r2
gitaly-fips-18.10 18.10.5-r1
gitaly-fips-18.11 18.11.2-r6
gitaly-fips-18.9 18.9.6-r4
gitea 1.25.5-r9
gitea-fips 1.25.5-r8
gitlab-rails-ce-18.1 18.1.6-r12
gitlab-rails-ce-18.10 18.10.6-r1
gitlab-rails-ce-18.11 18.11.2-r3
gitlab-rails-ce-18.4 18.4.6-r5
gitlab-rails-ce-18.9 18.9.7-r1
gitlab-rails-ce-fips-18.1 18.1.6-r12
gitlab-rails-ce-fips-18.10 18.10.6-r1
gitlab-rails-ce-fips-18.11 18.11.3-r1
gitlab-rails-ce-fips-18.9 18.9.7-r1
gitlab-runner-18.11 18.11.3-r1
gitlab-runner-fips-18.10 18.10.1-r9
gitlab-runner-fips-18.11 18.11.3-r2
gitlab-runner-helper-18.10 18.10.1-r8
gitlab-runner-helper-18.11 18.11.3-r1
gitlab-runner-helper-18.9 18.9.0-r12
gitlab-runner-helper-fips-18.10 18.10.1-r9
gitlab-runner-helper-fips-18.11 18.11.3-r1
gitlab-runner-helper-fips-18.9 18.9.0-r13
gitsign 0.16.0-r2
gomplate-4 4.3.3-r14
gomplate-5 5.1.0-r3
gomplate-fips-4 4.3.3-r13
gomplate-fips-5 5.1.0-r2
google-osconfig-agent 20251028.00-r17
goreleaser 2.15.4-r3
gptscript 0.9.9-r127
grafana-12.1 12.1.10.01-r8
grafana-alloy 1.15.1-r6
grafana-alloy-fips 1.15.1-r5
grafana-fips-12.1 12.1.10.01-r6
grype 0.112.0-r2
grype-db 0.53.3-r2
grype-fips 0.112.0-r2
guac 1.1.0-r10
guacone 1.1.0-r10
jfrog-cli 2.103.0-r2
k9s 0.50.18-r24
k9s-fips 0.50.18-r18
kaniko 1.25.14-r2
kaniko-fips 1.25.14-r2
kargo 1.10.3-r1
kots 1.130.2-r3
kubescape 4.0.8-r2
kubescape-server 4.0.8-r2
kubescape-server-fips 4.0.8-r3
kubevela-vela-cli 1.10.8-r6
kubevela-vela-cli-fips 1.10.8-r7
kubevela-vela-core 1.10.8-r6
kyverno-cli-1.15 1.15.3-r18
kyverno-cli-1.16 1.16.4-r4
kyverno-cli-1.17 1.17.2-r5
kyverno-cli-1.18 1.18.0-r3
kyverno-cli-fips-1.15 1.15.20-r3
kyverno-cli-fips-1.16 1.16.4-r3
kyverno-cli-fips-1.17 1.17.2-r4
kyverno-cli-fips-1.18 1.18.0-r3
mapotf 0.0.0_git20260426-r2
mapotf-fips 0.0.0_git20260426-r1
melange 0.50.6-r1
nemo 2.7.3-r4
nfpm 2.46.3-r2
nuclei 3.8.0-r6
osv-scanner 2.3.8-r1
packer 1.15.3-r3
packer-fips 1.15.3-r4
pulumi 3.238.0-r0
pulumi-kubernetes-operator 2.7.0-r5
pulumi-language-dotnet 3.106.1-r2
pulumi-language-go 3.238.0-r0
pulumi-language-java 1.27.0-r0
pulumi-language-nodejs 3.238.0-r0
pulumi-language-python 3.238.0-r0
pulumi-language-yaml 1.33.1-r1
rancher-fleet-cli 0.15.1-r3
rancher-fleet-cli-fips 0.15.1-r3
rancher-fleet-controller 0.15.1-r3
rancher-fleet-controller-fips 0.15.1-r3
redpanda-console 3.7.2-r3
scorecard 5.5.0-r3
skaffold 2.19.0-r3
skaffold-fips 2.20.0-r0
snyk-cli 1.1304.2-r3
src-fingerprint 0.19.0-r50
src-fingerprint-fips 0.19.0-r33
steampipe 2.4.2-r4
syft 1.44.0-r3
syft-fips 1.44.0-r2
teleport-17 17.7.24-r0
teleport-18 18.8.0-r1
teleport-18.6 18.6.8-r17
terragrunt 1.1.0-r0
terragrunt-fips 1.0.1-r3
tfsec 1.28.14-r32
trivy 0.69.3-r15
trivy-fips 0.69.3-r9
trivy-operator 0.30.1-r9
trivy-operator-fips 0.30.1-r7
trufflehog 3.94.3-r7
trufflehog-fips 3.94.3-r5
upwind-agent 0.130.0-r0
witness 0.11.0-r3
wolfictl 0.39.15-r1
xeol 0.10.8-r39
xeol-fips 0.10.8-r39
zarf 0.75.1-r2
zarf-fips 0.75.1-r3
zot 2.1.16-r5

References

N/A

Similar Threats

Free Vulnerability Check

Is your site affected by CGA-8x53-pqv6-wqhw?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against CGA-8x53-pqv6-wqhw and other known CVE records.

Scan My Site Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

Browse related advisories

All advisoriesChainguardChainguard Undated