{"id":"CGA-42wq-h5vj-5cxm","modified":"2026-01-28T03:18:12.918927Z","published":"2025-06-28T11:29:49.374791Z","withdrawn":"2026-01-28T03:18:12.918927Z","related":["CGA-42wq-h5vj-5cxm","GHSA-fv92-fjc5-jj9h"],"affected":[{"package":{"name":"witness","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/witness"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-42wq-h5vj-5cxm.json"}},{"package":{"name":"witness","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/witness"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-42wq-h5vj-5cxm.json"}}],"schema_version":"1.7.3"}