{"id":"CGA-php9-78m2-mx5f","modified":"2026-09-07T01:45:43.473519109Z","published":"2026-06-04T12:06:59Z","upstream":["CVE-2026-39821","GHSA-w2q5-6q6x-x959","GO-2026-5026"],"references":[{"type":"WEB","url":"https://go.dev/cl/767220"},{"type":"WEB","url":"https://go.dev/issue/78760"},{"type":"WEB","url":"https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"},{"type":"WEB","url":"https://pkg.go.dev"},{"type":"WEB","url":"https://pkg.go.dev/vuln/GO-2026-5026"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:23262"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:23264"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:26546"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:26547"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:30650"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:30651"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:30853"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:30854"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:30855"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:33155"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:33160"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:33163"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:33173"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:33183"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:33524"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:33531"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:34342"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:34357"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:34359"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:34364"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:34789"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:35826"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:35827"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:35828"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:35829"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:35830"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:35831"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:35993"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:35994"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:36167"},{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2026-39821"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39821.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39821"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480756"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:36105"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:36207"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:36648"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:36651"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:36796"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:36797"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:36808"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:36820"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:36883"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:37387"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:37435"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:37436"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:38995"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:39005"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:39573"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:39879"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:40118"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:40262"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:40945"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:41019"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:41030"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:41031"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:41036"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:41055"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:41066"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:41930"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:41928"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42043"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42047"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42048"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42049"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42050"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42051"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42078"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42079"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42080"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42082"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42132"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42142"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42146"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42150"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42151"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42240"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42644"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42796"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42852"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:43038"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:43052"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:43692"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:44624"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:44622"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:46395"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:47149"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:47735"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:47737"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:47952"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:50300"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:50843"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:51033"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:51112"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:51187"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:51194"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:51341"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:52826"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:53374"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:53412"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:53413"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:53415"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:53530"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:54191"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:54283"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:54285"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:54287"},{"type":"WEB","url":"https://groups.google.com/g/golang-announce/c/94pEornpRlI"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:54274"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:54284"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:54286"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:54395"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:54401"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:54435"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:54441"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:54531"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:54757"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:54580"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:56143"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:56223"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:56340"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:56431"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:57194"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:57541"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:49702"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:49712"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:57649"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:57845"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:59546"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:59549"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:59562"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:60315"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:60354"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:60387"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:61245"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:61253"}],"affected":[{"package":{"name":"kubernetes-fips-1.32","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubernetes-fips-1.32?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.32.13-r2"}]}],"ecosystem_specific":{"components":[{"component_version":"v0.38.0","component_type":"go-module","component_location":"/usr/bin/kubelet","component_purl":"pkg:golang/golang.org/x/net@v0.38.0","latest_event_status":"fixed","latest_event_timestamp":"2026-08-19T16:46:45Z","component_name":"golang.org/x/net"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-php9-78m2-mx5f.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N"}]}