{"id":"CGA-2jg9-9ccq-wcm4","modified":"2026-09-07T02:02:09.587522314Z","published":"2026-03-03T21:00:05.367637Z","withdrawn":"2026-09-07T02:02:09.587522117Z","related":["GHSA-5c6j-r48x-rmvq"],"affected":[{"package":{"name":"arangodb-3.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/arangodb-3.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14.5-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"arangodb-3.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/arangodb-3.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.9.4-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"argo-workflows-ui-3.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflows-ui-3.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.19-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"argo-workflows-ui-3.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflows-ui-3.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.13-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"argo-workflows-ui-4.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflows-ui-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.4-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"drupal-11.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/drupal-11.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.13-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.1.6-r37"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"gitlab-rails-ce-19.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.3.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.3.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-earlystopping","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-earlystopping"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-suggestion-hyperband","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-hyperband"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-suggestion-hyperopt","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-hyperopt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-suggestion-nas-darts","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-nas-darts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-suggestion-nas-enas","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-nas-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-suggestion-optuna-enas","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-optuna-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-suggestion-pbt-enas","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-pbt-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-suggestion-skopt-enas","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-skopt-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-tfevent-metricscollector","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-tfevent-metricscollector"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"langfuse-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"langfuse-2-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-2-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"langfuse-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.155.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"langfuse-3-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.155.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"langfuse-fips-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r16"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"langfuse-fips-2-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-2-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r16"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"langfuse-fips-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.156.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"langfuse-fips-3-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.156.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"librechat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/librechat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"opensearch-dashboards-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"opensearch-dashboards-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"opensearch-dashboards-3-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"sqlpad","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sqlpad"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.7-r28"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"tileserver-gl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tileserver-gl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"tileserver-gl-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tileserver-gl-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"wazuh-dashboard-alerting-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard-alerting-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.7-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"wazuh-dashboard-alerting-dashboards-plugin-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard-alerting-dashboards-plugin-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.7-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"wazuh-dashboard-dashboards-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.7-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"wazuh-dashboard-dashboards-reporting-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-reporting-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.7-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"wazuh-dashboard-index-management-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard-index-management-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.7-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"wazuh-dashboard-index-management-dashboards-plugin-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard-index-management-dashboards-plugin-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.7-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"wazuh-dashboard-security-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.7-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"wazuh-dashboard-security-plugin-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.7-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"argo-workflows-ui-3.7","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-workflows-ui-3.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.13-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"argo-workflows-ui-4.0","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-workflows-ui-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.4-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-earlystopping","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-earlystopping"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-suggestion-hyperband","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-hyperband"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-suggestion-hyperopt","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-hyperopt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-suggestion-nas-darts","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-nas-darts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-suggestion-nas-enas","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-nas-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-suggestion-optuna-enas","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-optuna-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-suggestion-pbt-enas","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-pbt-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-suggestion-skopt-enas","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-skopt-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"katib-tfevent-metricscollector","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-tfevent-metricscollector"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"langfuse-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/langfuse-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.155.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"langfuse-3-worker","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/langfuse-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.155.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"opensearch-dashboards-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"sqlpad","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sqlpad"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.7-r28"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}},{"package":{"name":"tileserver-gl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tileserver-gl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2jg9-9ccq-wcm4.json"}}],"schema_version":"1.9.0"}