{"id":"CGA-39qr-jmx6-xj3f","modified":"2026-09-07T02:02:47.991513114Z","published":"2026-01-12T17:05:09.264873Z","withdrawn":"2026-09-07T02:02:47.991512955Z","related":["CVE-2025-8869","GHSA-4xh5-x5gv-qwph"],"affected":[{"package":{"name":"airflow-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"airflow-2-bitnami-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-2-bitnami-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"airflow-2-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-2-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"airflow-2-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-2-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"graalvm-25-graalpy-venv","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/graalvm-25-graalpy-venv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.2-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"localstack","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/localstack"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"mlflow","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"nvidia-nsight-compute-13.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nvidia-nsight-compute-13.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.4.1.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"nvidia-nsight-compute-13.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nvidia-nsight-compute-13.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.1.1.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"nvidia-nsight-compute-13.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nvidia-nsight-compute-13.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.2.1.5-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-cassandra-medusa","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-cassandra-medusa"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-pip-wheel","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-pip-wheel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-pip-wheel-bootstrap","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-pip-wheel-bootstrap"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-supported-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-supported-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.10-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.10-pip-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.10-virtualenv","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-virtualenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.11-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.11-pip-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.11-virtualenv","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-virtualenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.12-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.12-pip-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.12-virtualenv","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-virtualenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.13-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.13-pip-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.13-virtualenv","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-virtualenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.14-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.14-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.14-pip-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.14-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.9-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.9-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"reflex","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/reflex"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.14-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"request-1276","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/request-1276"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"mlflow","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-cassandra-medusa","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-cassandra-medusa"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-pip-wheel","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-pip-wheel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-pip-wheel-bootstrap","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-pip-wheel-bootstrap"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-supported-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-supported-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.10-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.10-pip-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.10-virtualenv","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-virtualenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.11-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.11-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.11-pip-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.11-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.11-virtualenv","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.11-virtualenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.12-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.12-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.12-pip-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.12-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.12-virtualenv","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.12-virtualenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.13-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.13-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.13-pip-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.13-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.13-virtualenv","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.13-virtualenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.14-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.14-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.14-pip-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.14-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"reflex","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/reflex"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.14-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}}],"schema_version":"1.9.0"}