{"id":"CGA-9872-x6fm-rg9g","modified":"2026-09-07T02:03:40.954117310Z","published":"2026-09-05T14:12:21Z","withdrawn":"2026-09-07T02:03:40.954116060Z","related":["CVE-2026-14978","GHSA-92x3-5h48-mfhx"],"affected":[{"package":{"name":"helmfile","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/helmfile"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"opentofu-1.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.10-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"opentofu-1.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.14-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"opentofu-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.6-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"opentofu-1.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-r30"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"opentofu-fips-1.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-fips-1.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.10-r16"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"opentofu-fips-1.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-fips-1.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.14-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"opentofu-fips-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-fips-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.6-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"opentofu-fips-1.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentofu-fips-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-r35"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"terraform","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.7-r61"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"terraform-1.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-1.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.5-r28"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"terraform-fips-1.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-fips-1.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.5-r35"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"terraform-fips-1.14","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-fips-1.14"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.9-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"terraform-ls","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-ls"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.39.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"terraform-mcp-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/terraform-mcp-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"vault-1.21","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-1.21"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.4-r18"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"vault-2.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-2.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"vault-2.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-2.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"vault-fips-1.21","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-fips-1.21"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.4-r18"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"vault-fips-2.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-fips-2.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"vault-fips-2.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-fips-2.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"opentofu-1.10","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentofu-1.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.10-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"opentofu-1.11","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentofu-1.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.14-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"opentofu-1.12","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentofu-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.6-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"opentofu-1.9","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentofu-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-r30"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"terraform","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/terraform"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.7-r61"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}},{"package":{"name":"terraform-mcp-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/terraform-mcp-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9872-x6fm-rg9g.json"}}],"schema_version":"1.9.0"}