CVE-2026-1188
Chainguard vulnerability analysis and mitigation

In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not accounting for the separator inserted between processor features. If the output buffer supplied to this function was incorrectly sized, failing to account for the separator when determining when a write to the buffer was safe could lead to a buffer overflow. This issue is fixed in Eclipse OMR version 0.8.0.


SourceNVD

Related Chainguard vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-40175CRITICAL10
  • JavaScriptJavaScript
  • grafana-prometheus
NoYesApr 10, 2026
CVE-2026-32316HIGH8.2
  • WolfiWolfi
  • jq-devel
NoNoApr 13, 2026
CVE-2026-40190MEDIUM5.6
  • ChainguardChainguard
  • langsmith
NoYesApr 10, 2026
CVE-2026-40179MEDIUM5.3
  • MinIOMinIO
  • certificate-transparency-fips
NoYesApr 15, 2026
CVE-2026-40228LOW2.9
  • WolfiWolfi
  • systemd
NoYesApr 10, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management