{"id":"CGA-2cfw-9vcf-c3pw","modified":"2026-01-28T03:13:37.451925Z","published":"2025-08-10T05:37:39.153857Z","withdrawn":"2026-01-28T03:13:37.451925Z","related":["CGA-2cfw-9vcf-c3pw","CVE-2025-47907","GHSA-j5pm-7495-qmr3"],"affected":[{"package":{"name":"cosign","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cosign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2cfw-9vcf-c3pw.json"}},{"package":{"name":"cosign","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/cosign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2cfw-9vcf-c3pw.json"}}],"schema_version":"1.7.3"}