{"id":"CGA-5hvw-2376-3qwp","modified":"2026-09-07T02:03:21.868689806Z","published":"2026-01-07T12:59:00.285321Z","withdrawn":"2026-09-07T02:03:21.868689649Z","related":["CVE-2024-29371","GHSA-3677-xxcr-wjqv"],"affected":[{"package":{"name":"apache-pulsar","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"apache-pulsar-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"confluent-common-docker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/confluent-common-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6.9-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"hadoop-fips-3.3.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/hadoop-fips-3.3.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.6-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"hadoop-fips-3.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/hadoop-fips-3.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"kafka-3.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-3.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-r50"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"kafka-3.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-3.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.1-r49"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"kafka-4.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"kafka-iamguarded-compat-4.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-iamguarded-compat-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"kafka-strimzi-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-strimzi-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"kafka_exporter-strimzi-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka_exporter-strimzi-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"kayenta-2026.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kayenta-2026.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.1.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"kayenta-fips-2026.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kayenta-fips-2026.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.1.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"prometheus-jmx-exporter-strimzi-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/prometheus-jmx-exporter-strimzi-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-cluster-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-cluster-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-agent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-init","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-init"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-thirdparty-libs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-thirdparty-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-thirdparty-libs-cc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-topic-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-topic-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-tracing-agent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-tracing-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-user-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-user-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"apache-pulsar","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-pulsar"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"apache-pulsar-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-pulsar-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"confluent-common-docker","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/confluent-common-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6.9-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"kafka-strimzi-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kafka-strimzi-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"kafka_exporter-strimzi-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kafka_exporter-strimzi-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"prometheus-jmx-exporter-strimzi-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/prometheus-jmx-exporter-strimzi-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-cluster-operator","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-cluster-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-agent","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-init","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-init"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-thirdparty-libs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-thirdparty-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-thirdparty-libs-cc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-topic-operator","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-topic-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-tracing-agent","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-tracing-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}},{"package":{"name":"strimzi-kafka-operator-user-operator","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-user-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hvw-2376-3qwp.json"}}],"schema_version":"1.9.0"}