{"id":"CGA-9p5h-c2p6-vcjp","modified":"2026-09-07T02:03:43.987150006Z","published":"2026-01-29T00:45:34.400332Z","withdrawn":"2026-09-07T02:03:43.987149854Z","related":["CVE-2018-20225","GHSA-7p5p-7qq5-cc86"],"affected":[{"package":{"name":"conda","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/conda"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"conda-init","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/conda-init"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"conda-wrapper","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/conda-wrapper"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"pulumi","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"pulumi-language-go","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi-language-go"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"pulumi-language-python","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi-language-python"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3-pip-wheel","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-pip-wheel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3-supported-conda","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-supported-conda"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3-supported-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-supported-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.10-conda","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-conda"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.10-conda-bin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-conda-bin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.10-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.10-pip-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.11-conda","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-conda"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.11-conda-bin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-conda-bin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.11-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.11-pip-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.12-conda","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-conda"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.12-conda-bin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-conda-bin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.12-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.12-pip-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.13-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.13-pip-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.14-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.14-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.14-pip-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.14-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.7-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.7-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.8-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.8-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.9-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.9-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"conda","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/conda"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"conda-init","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/conda-init"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"conda-wrapper","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/conda-wrapper"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"pulumi","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"pulumi-language-go","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi-language-go"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"pulumi-language-python","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi-language-python"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3-pip-wheel","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-pip-wheel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3-supported-conda","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-supported-conda"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3-supported-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-supported-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.10-conda","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-conda"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.10-conda-bin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-conda-bin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.10-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.10-pip-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.11-conda","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.11-conda"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.11-conda-bin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.11-conda-bin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.11-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.11-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.11-pip-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.11-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.12-conda","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.12-conda"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.12-conda-bin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.12-conda-bin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.12-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.12-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.12-pip-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.12-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.13-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.13-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.13-pip-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.13-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.14-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.14-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}},{"package":{"name":"py3.14-pip-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.14-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9p5h-c2p6-vcjp.json"}}],"schema_version":"1.7.3"}