{"id":"CGA-6c4f-hqr7-3vw2","modified":"2026-09-07T02:03:25.918602782Z","published":"2026-01-29T00:43:42.584672Z","withdrawn":"2026-09-07T02:03:25.918602549Z","related":["CVE-2025-43859","GHSA-vqfr-h8mv-ghfj"],"affected":[{"package":{"name":"airflow","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.5-r43"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"airflow-bitnami-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-bitnami-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.5-r43"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"airflow-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.5-r43"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"airflow-core","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.5-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"airflow-core-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-core-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.5-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"airflow-core-oci-entrypoint","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-core-oci-entrypoint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.5-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"checkov","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/checkov"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.432-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"jupyter-base-notebook","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jupyter-base-notebook"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-agent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-agent-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-agent-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-manager","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-manager"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-manager-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-manager-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-qpext","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-qpext"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-qpext-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-qpext-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-router","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-router"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-router-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-router-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-storage-controller","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-storage-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kubeflow-pipelines-visualization-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-pipelines-visualization-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"localstack","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/localstack"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"localstack-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/localstack-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"mitmproxy","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mitmproxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"nemo","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nemo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"pgadmin4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pgadmin4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"pgadmin4-oci-entrypoint","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pgadmin4-oci-entrypoint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"pgadmin4-pg12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pgadmin4-pg12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"pgadmin4-pg13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pgadmin4-pg13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"pgadmin4-pg14","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pgadmin4-pg14"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"pgadmin4-pg15","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pgadmin4-pg15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"pgadmin4-pg16","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pgadmin4-pg16"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"pgadmin4-pg17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pgadmin4-pg17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"py3.10-vllm-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-vllm-cuda-11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"py3.10-vllm-cuda-12.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-vllm-cuda-12.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.5-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"py3.10-wheels-vllm-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-wheels-vllm-cuda-11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"reflex","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/reflex"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.9-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"airflow","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/airflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.5-r43"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"airflow-bitnami-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/airflow-bitnami-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.5-r43"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"airflow-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/airflow-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.5-r43"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"checkov","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/checkov"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.432-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"jupyter-base-notebook","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/jupyter-base-notebook"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-agent","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-agent-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-agent-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-manager","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-manager"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-manager-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-manager-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-qpext","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-qpext"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-qpext-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-qpext-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-router","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-router"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-router-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-router-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kserve-storage-controller","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-storage-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"kubeflow-pipelines-visualization-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-pipelines-visualization-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"mitmproxy","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mitmproxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}},{"package":{"name":"reflex","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/reflex"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.9-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6c4f-hqr7-3vw2.json"}}],"schema_version":"1.7.5"}