{"id":"CGA-cf98-2826-9vqc","modified":"2026-09-07T01:32:36.239035971Z","published":"2025-10-30T20:46:30Z","upstream":["CVE-2025-53945","GHSA-x6ph-r535-3vjw","GO-2025-3816"],"references":[{"type":"WEB","url":"https://github.com/chainguard-dev/apko/releases/tag/v0.27.0"},{"type":"WEB","url":"https://github.com/chainguard-dev/apko/releases/tag/v0.29.5"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53945.json"},{"type":"ADVISORY","url":"https://github.com/chainguard-dev/apko/security/advisories/GHSA-x6ph-r535-3vjw"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-53945"},{"type":"FIX","url":"https://github.com/chainguard-dev/apko/commit/04f37e2d50d5a502e155788561fb7d40de705bd9"},{"type":"FIX","url":"https://github.com/chainguard-dev/apko/commit/aedb0772d6bf6e74d8f17690946dbc791d0f6af3"}],"affected":[{"package":{"name":"docker-credential-cgr","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/docker-credential-cgr?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.107-r0"}]}],"ecosystem_specific":{"components":[{"component_name":"chainguard.dev/apko","component_version":"v0.29.2","component_type":"go-module","component_location":"/usr/bin/chainctl","component_purl":"pkg:golang/chainguard.dev/apko@v0.29.2","latest_event_status":"fixed","latest_event_timestamp":"2025-07-22T01:28:20Z"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cf98-2826-9vqc.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L"}]}