{"id":"CGA-38qc-87rx-2r8x","modified":"2026-09-07T02:02:46.689072321Z","published":"2026-05-06T19:30:06.264390Z","withdrawn":"2026-09-07T02:02:46.689072119Z","related":["CVE-2026-42327","GHSA-xp3w-r5p5-63rr"],"affected":[{"package":{"name":"bootc-binary","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/bootc-binary"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"deno","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/deno"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.14-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"guestproxyagent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/guestproxyagent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.44-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"komodo-cli","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/komodo-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"komodo-periphery","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/komodo-periphery"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"rpm-sequoia","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rpm-sequoia"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"rustls-openssl-client","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rustls-openssl-client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"rustup","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rustup"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"sccache","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sccache"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"sdp-identity-service","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sdp-identity-service"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"sdp-k8s-injector","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sdp-k8s-injector"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"sentry-cli","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sentry-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"sqlx","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sqlx"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.6-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"typst","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/typst"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.2-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"valkey-ldap","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/valkey-ldap"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"vector","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vector"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.55.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"ztunnel-fips-1.27","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ztunnel-fips-1.27"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.9-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"ztunnel-fips-1.28","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ztunnel-fips-1.28"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.5-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"ztunnel-fips-1.29","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ztunnel-fips-1.29"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"deno","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/deno"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.14-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"rpm-sequoia","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rpm-sequoia"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"rustup","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rustup"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"sccache","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sccache"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"sdp-identity-service","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sdp-identity-service"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"sdp-k8s-injector","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sdp-k8s-injector"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"sqlx","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sqlx"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.6-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}},{"package":{"name":"vector","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vector"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.55.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-38qc-87rx-2r8x.json"}}],"schema_version":"1.9.0"}