{"id":"CGA-9xm3-x84m-gh3c","modified":"2026-09-07T02:03:45.328618560Z","published":"2026-05-15T20:33:16.848978Z","withdrawn":"2026-09-07T02:03:45.328618359Z","related":["GHSA-gxhx-2686-5h9g"],"affected":[{"package":{"name":"argo-cd-3.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-3.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.16-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-3.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-3.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.12-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-3.2-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-3.2-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.12-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-3.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-3.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-3.3-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-3.3-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-3.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-3.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-3.4-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-3.4-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-fips-3.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-fips-3.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.16-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-fips-3.1-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-fips-3.1-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.16-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-fips-3.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-fips-3.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.12-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-fips-3.2-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-fips-3.2-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.12-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-fips-3.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-fips-3.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-fips-3.3-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-fips-3.3-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-fips-3.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-fips-3.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-fips-3.4-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-fips-3.4-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-events","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-events"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.10-r21"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-events-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-events-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.10-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-rollouts","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-rollouts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-rollouts-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-rollouts-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"atlantis","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/atlantis"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"atlantis-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/atlantis-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"bento","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/bento"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.0-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"bento-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/bento-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"goreleaser","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/goreleaser"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.4-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"kubectl-argo-rollouts","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubectl-argo-rollouts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"kubectl-argo-rollouts-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubectl-argo-rollouts-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"kubernetes-event-exporter","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubernetes-event-exporter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7-r61"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"kubernetes-event-exporter-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubernetes-event-exporter-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7-r28"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"kubewatch","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubewatch"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"kyverno-policy-reporter","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-policy-reporter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"kyverno-policy-reporter-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-policy-reporter-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"ory-kratos","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ory-kratos"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"ory-kratos-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ory-kratos-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.0-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"peerdb-flow","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/peerdb-flow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.36.18-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-3.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-cd-3.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.16-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-3.2","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-cd-3.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.12-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-3.2-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-cd-3.2-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.12-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-3.3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-cd-3.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-3.3-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-cd-3.3-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-3.4","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-cd-3.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-cd-3.4-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-cd-3.4-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-events","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-events"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.10-r21"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"argo-rollouts","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-rollouts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"atlantis","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/atlantis"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"bento","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/bento"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.0-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"goreleaser","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/goreleaser"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.4-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"kubectl-argo-rollouts","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubectl-argo-rollouts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"kubernetes-event-exporter","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubernetes-event-exporter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7-r61"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"kubewatch","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubewatch"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}},{"package":{"name":"kyverno-policy-reporter","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kyverno-policy-reporter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-9xm3-x84m-gh3c.json"}}],"schema_version":"1.7.5"}