{"id":"CGA-26j3-phpv-5cr4","modified":"2026-07-17T18:28:01.489268827Z","published":"2026-03-19T13:27:09Z","upstream":["CVE-2026-33186","GHSA-p77j-4mvh-x3m3","GO-2026-4762"],"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33186.json"},{"type":"ADVISORY","url":"https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33186"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33186.json"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10093"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10094"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10105"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10107"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10125"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10126"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10130"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10131"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10153"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10155"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10158"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10172"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10175"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10698"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10705"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10706"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:11070"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:11408"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:11803"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:11856"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:11916"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:11996"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:12116"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:12118"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:12119"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:12277"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:12279"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:12283"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:12337"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:13548"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:13791"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:13829"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:14775"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:15092"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17123"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17448"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17459"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17468"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17474"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17475"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17598"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17599"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17789"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:18068"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:18585"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:19099"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:19108"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:19109"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:19135"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:19207"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:19353"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:19375"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:19712"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:19719"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:19720"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:19721"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:20034"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:20035"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:20041"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:20042"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:20088"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:20089"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:20322"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:20436"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:20943"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:20946"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:21017"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:21657"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:21658"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:21691"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:21692"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:21696"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:21697"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:21703"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:21704"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:21709"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:21710"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:21769"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:21931"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:21932"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22347"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22423"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22450"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22465"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22485"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22645"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22689"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22714"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22800"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22937"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22959"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22961"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:23228"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:23234"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:23235"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:23241"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:23246"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:23247"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:23345"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:24484"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:24506"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:24535"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:24536"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:24759"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:24853"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:24977"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:25009"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:25045"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:25127"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:25182"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:25183"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:25187"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:25194"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:25195"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:25201"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:26412"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:26413"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:26416"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:26420"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:26519"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:26568"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:26997"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:26999"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:27001"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:27004"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:27063"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:27076"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:27712"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:27856"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:27892"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:27893"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:27901"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:27957"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:28047"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:28893"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:28964"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:29079"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:29082"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:29854"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:34364"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:6174"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:6428"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:6564"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:6802"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:7110"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:7128"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:7245"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:8151"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:8338"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:8433"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:8449"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:8483"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:8484"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:8490"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:8491"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:8493"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:9385"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:9388"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:9440"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:9448"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:9453"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:9872"},{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2026-33186"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2449833"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:34769"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:34794"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:34795"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:34049"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:34097"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:34099"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:36651"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:36796"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:36882"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:34100"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:37275"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:37585"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:37192"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:37580"}],"affected":[{"package":{"name":"istio-pilot-discovery-1.29","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/istio-pilot-discovery-1.29?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.1-r6"}]}],"ecosystem_specific":{"components":[{"component_type":"go-module","component_location":"/usr/bin/pilot-discovery","component_purl":"pkg:golang/google.golang.org/grpc@v1.78.0","latest_event_status":"fixed","latest_event_timestamp":"2026-03-19T19:54:42Z","architecture":"aarch64","component_name":"google.golang.org/grpc","component_version":"v1.78.0"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-26j3-phpv-5cr4.json"}},{"package":{"name":"istio-pilot-discovery-1.29","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/istio-pilot-discovery-1.29?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.1-r6"}]}],"ecosystem_specific":{"components":[{"component_type":"go-module","component_location":"/usr/bin/pilot-discovery","component_purl":"pkg:golang/google.golang.org/grpc@v1.78.0","latest_event_status":"fixed","latest_event_timestamp":"2026-03-19T19:54:42Z","architecture":"aarch64","component_name":"google.golang.org/grpc","component_version":"v1.78.0"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-26j3-phpv-5cr4.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"}]}