{"id":"CGA-9jf5-qmm3-5c74","modified":"2026-09-07T02:03:43.347346844Z","published":"2026-08-04T19:00:39Z","withdrawn":"2026-09-07T02:03:43.347346701Z","related":["CVE-2026-16729","GHSA-v3r7-h72x-cjcm"],"affected":[{"package":{"name":"actions-runner","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/actions-runner"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.336.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"code-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/code-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.130.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"kibana-8.19","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.19"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.20-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"kibana-8.19-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.19-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.20-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"kibana-8.19-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.19-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.20-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"kibana-9.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"kibana-9.2-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.2-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"langfuse-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.225.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"langfuse-3-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.225.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"langfuse-4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"langfuse-4-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-4-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"langfuse-fips-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.224.3-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"langfuse-fips-3-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.224.3-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"langfuse-fips-4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"langfuse-fips-4-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-4-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"npm-12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/npm-12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"pelias-api","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pelias-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"prism","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/prism"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.256.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"renovate","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/renovate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"44.23.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"saf","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/saf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"vitess-24","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vitess-24"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.2-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"code-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/code-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.130.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"langfuse-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/langfuse-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.225.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"langfuse-3-worker","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/langfuse-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.225.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"npm-12","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/npm-12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"prism","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/prism"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.256.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"renovate","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/renovate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"44.23.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"saf","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/saf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}},{"package":{"name":"vitess-24","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vitess-24"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.2-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9jf5-qmm3-5c74.json"}}],"schema_version":"1.9.0"}