{"id":"CGA-cfp4-cwq6-ffpx","modified":"2026-09-07T02:03:47.093703683Z","published":"2026-03-30T18:17:34.484405Z","withdrawn":"2026-09-07T02:03:47.093703553Z","related":["GHSA-7rx3-28cr-v5wh"],"affected":[{"package":{"name":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.1.6-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.6-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.1.6-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.6-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-8.17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-8.17-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.17-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-8.17-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.17-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-8.18","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.18.8-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-8.18-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.18-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.18.8-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-8.18-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.18-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.18.8-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-8.19","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.19"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.13-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-8.19-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.19-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.13-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-8.19-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.19-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.13-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-9.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r16"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-9.0-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.0-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r16"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-9.0-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.0-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r16"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-9.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.10-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-9.1-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.1-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.10-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-9.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.7-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-9.2-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.2-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.7-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-9.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"kibana-9.3-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.3-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"lerna","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/lerna"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.7-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"nextcloud-server-32","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nextcloud-server-32"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32.0.12-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"opensearch-dashboards-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"opensearch-dashboards-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"opensearch-dashboards-3-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"pelias-api","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pelias-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"prism","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/prism"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.3-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"py3.10-jupyterlab","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-jupyterlab"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"py3.11-jupyterlab","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-jupyterlab"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"py3.12-jupyterlab","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-jupyterlab"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"py3.13-jupyterlab","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-jupyterlab"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"rancher-api-ui","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-api-ui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"tensorflow-cpu-jupyter","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tensorflow-cpu-jupyter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.21.0-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"tileserver-gl-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tileserver-gl-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"ts-patch","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ts-patch"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"wazuh-dashboard","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"wazuh-dashboard-security-plugin-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.5-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"lerna","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/lerna"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.7-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"nextcloud-server-32","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/nextcloud-server-32"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32.0.12-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"opensearch-dashboards-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"prism","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/prism"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.3-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"py3.10-jupyterlab","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-jupyterlab"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"py3.11-jupyterlab","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.11-jupyterlab"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"py3.12-jupyterlab","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.12-jupyterlab"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"py3.13-jupyterlab","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.13-jupyterlab"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"rancher-api-ui","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rancher-api-ui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}},{"package":{"name":"ts-patch","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ts-patch"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cfp4-cwq6-ffpx.json"}}],"schema_version":"1.9.0"}