{"id":"CGA-38fx-6gx7-5m4x","modified":"2026-01-28T03:16:46.888397Z","published":"2025-11-03T02:35:40.420270Z","withdrawn":"2026-01-28T03:16:46.888397Z","related":["CGA-38fx-6gx7-5m4x","CVE-2025-58189","GHSA-cxq7-xw9v-rcv3"],"affected":[{"package":{"name":"aws-signer-notation-plugin-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/aws-signer-notation-plugin-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2292-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38fx-6gx7-5m4x.json"}}],"schema_version":"1.7.3"}