{"id":"CGA-5qxf-rh36-3g5w","modified":"2026-09-07T02:03:22.432211767Z","published":"2026-07-21T16:21:46Z","withdrawn":"2026-09-07T02:03:22.432211620Z","related":["CVE-2026-59877","GHSA-j3f2-48v5-ccww"],"affected":[{"package":{"name":"cadence-web","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cadence-web"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.16-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"homepage","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/homepage"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.2-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"jitsucom-jitsu-console","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jitsucom-jitsu-console"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-r30"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"kibana-9.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r34"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"kibana-9.0-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.0-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r34"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"kibana-9.0-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.0-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r34"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"kibana-9.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.4-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"kibana-9.4-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.4-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.4-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"kubeflow-centraldashboard","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-centraldashboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"langfuse-fips-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.222.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"langfuse-fips-3-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.222.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"librechat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/librechat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"nemo","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nemo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.3-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"opentelemetry-auto-instrumentations-node","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentelemetry-auto-instrumentations-node"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.253.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"thingsboard-tb-js-executor-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard-tb-js-executor-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1.3-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"vitess-24","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vitess-24"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.2-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"jitsucom-jitsu-console","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/jitsucom-jitsu-console"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-r30"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"kubeflow-centraldashboard","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-centraldashboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.253.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}},{"package":{"name":"vitess-24","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vitess-24"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.2-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5qxf-rh36-3g5w.json"}}],"schema_version":"1.8.0"}