{"id":"CGA-976w-g8c9-jwf5","modified":"2026-09-07T02:03:40.633611249Z","published":"2026-04-30T16:15:16.457983Z","withdrawn":"2026-09-07T02:03:40.633611054Z","related":["CVE-2026-40542","GHSA-v468-qcjx-r72w"],"affected":[{"package":{"name":"apache-nifi","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-nifi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"dependency-track","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dependency-track"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"dependency-track-apiserver","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dependency-track-apiserver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"dependency-track-bundled","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dependency-track-bundled"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3-alerting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-3-alerting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3-anomaly-detection","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-3-anomaly-detection"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3-cross-cluster-replication","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-3-cross-cluster-replication"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3-k-nn","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-3-k-nn"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3-ml-commons","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-3-ml-commons"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3-notifications","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-3-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3-security","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-3-security"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3-sql","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-3-sql"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-fips-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-fips-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-fips-3-alerting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-fips-3-alerting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-fips-3-anomaly-detection","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-fips-3-anomaly-detection"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-fips-3-cross-cluster-replication","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-fips-3-cross-cluster-replication"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-fips-3-k-nn","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-fips-3-k-nn"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-fips-3-ml-commons","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-fips-3-ml-commons"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-fips-3-notifications","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-fips-3-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-fips-3-security","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-fips-3-security"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-fips-3-sql","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-fips-3-sql"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"pinot","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pinot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"pinot-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pinot-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-clickhouse","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-clickhouse"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-delta-lake","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-delta-lake"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-druid","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-hive","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-hive"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-hudi","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-hudi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-iceberg","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-iceberg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-kafka","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-kafka"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-lakehouse","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-lakehouse"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-openlineage","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-openlineage"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-pinot","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-pinot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"apache-nifi","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-nifi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"dependency-track","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/dependency-track"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"dependency-track-bundled","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/dependency-track-bundled"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3-alerting","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-3-alerting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3-anomaly-detection","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-3-anomaly-detection"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3-cross-cluster-replication","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-3-cross-cluster-replication"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3-k-nn","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-3-k-nn"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3-ml-commons","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-3-ml-commons"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3-notifications","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-3-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3-security","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-3-security"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"opensearch-3-sql","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-3-sql"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-clickhouse","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-clickhouse"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-delta-lake","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-delta-lake"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-druid","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-hive","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-hive"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-hudi","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-hudi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-iceberg","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-iceberg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-kafka","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-kafka"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-lakehouse","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-lakehouse"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-openlineage","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-openlineage"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}},{"package":{"name":"trino-plugin-pinot","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-pinot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-976w-g8c9-jwf5.json"}}],"schema_version":"1.7.5"}