{"id":"CGA-7qm2-wgvr-899f","modified":"2026-09-07T02:03:34.119601529Z","published":"2026-01-29T00:47:22.646403Z","withdrawn":"2026-09-07T02:03:34.119601386Z","related":["CVE-2025-7339","GHSA-76c9-3jph-rj3q"],"affected":[{"package":{"name":"argo-workflows","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflows"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.10-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"code-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/code-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.102.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"code-server-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/code-server-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.102.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"gitlab-rails-ce-19.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.3.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.3.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"json-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/json-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.4-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-earlystopping","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-earlystopping"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-suggestion-hyperband","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-hyperband"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-suggestion-hyperopt","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-hyperopt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-suggestion-nas-darts","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-nas-darts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-suggestion-nas-enas","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-nas-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-suggestion-optuna-enas","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-optuna-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-suggestion-pbt-enas","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-pbt-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-suggestion-skopt-enas","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-skopt-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-tfevent-metricscollector","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-tfevent-metricscollector"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"kubeflow-centraldashboard","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-centraldashboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"serve","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/serve"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"sqlpad","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sqlpad"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"sqlpad-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sqlpad-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"thingsboard","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"thingsboard-tb-js-executor","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard-tb-js-executor"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"thingsboard-tb-mqtt-transport","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard-tb-mqtt-transport"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"thingsboard-tb-node","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard-tb-node"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"thingsboard-tb-web-ui","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard-tb-web-ui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"tileserver-gl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tileserver-gl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"tileserver-gl-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tileserver-gl-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"tileserver-gl-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tileserver-gl-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"tileserver-gl-fips-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tileserver-gl-fips-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"vitess-22","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vitess-22"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"argo-workflows","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-workflows"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.10-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"code-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/code-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.102.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"code-server-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/code-server-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.102.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"json-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/json-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.4-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-earlystopping","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-earlystopping"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-suggestion-hyperband","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-hyperband"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-suggestion-hyperopt","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-hyperopt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-suggestion-nas-darts","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-nas-darts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-suggestion-nas-enas","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-nas-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-suggestion-optuna-enas","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-optuna-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-suggestion-pbt-enas","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-pbt-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-suggestion-skopt-enas","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-skopt-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"katib-tfevent-metricscollector","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-tfevent-metricscollector"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"kubeflow-centraldashboard","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-centraldashboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"serve","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/serve"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"sqlpad","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sqlpad"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"sqlpad-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sqlpad-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"thingsboard","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/thingsboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"thingsboard-tb-js-executor","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/thingsboard-tb-js-executor"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"thingsboard-tb-mqtt-transport","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/thingsboard-tb-mqtt-transport"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"thingsboard-tb-node","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/thingsboard-tb-node"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"thingsboard-tb-web-ui","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/thingsboard-tb-web-ui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"tileserver-gl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tileserver-gl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}},{"package":{"name":"tileserver-gl-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tileserver-gl-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7qm2-wgvr-899f.json"}}],"schema_version":"1.9.0"}