{"id":"CGA-59mm-mxvc-6h23","modified":"2026-09-07T02:03:20.430563061Z","published":"2026-01-29T00:44:04.052835Z","withdrawn":"2026-09-07T02:03:20.430562890Z","related":["CVE-2024-45395","GHSA-cq38-jh5f-37mq","GO-2024-3116"],"affected":[{"package":{"name":"cosign","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cosign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-59mm-mxvc-6h23.json"}},{"package":{"name":"cosign-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cosign-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-59mm-mxvc-6h23.json"}},{"package":{"name":"gh","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-59mm-mxvc-6h23.json"}},{"package":{"name":"gh-doc","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gh-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-59mm-mxvc-6h23.json"}},{"package":{"name":"slsa-verifier","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/slsa-verifier"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-59mm-mxvc-6h23.json"}},{"package":{"name":"cosign","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/cosign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-59mm-mxvc-6h23.json"}},{"package":{"name":"cosign-fips","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/cosign-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-59mm-mxvc-6h23.json"}},{"package":{"name":"gh","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-59mm-mxvc-6h23.json"}},{"package":{"name":"gh-doc","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gh-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-59mm-mxvc-6h23.json"}},{"package":{"name":"slsa-verifier","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/slsa-verifier"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-59mm-mxvc-6h23.json"}}],"schema_version":"1.7.3"}