{"id":"CGA-cq2m-2ghh-c6hg","modified":"2026-09-07T02:03:45.389168326Z","published":"2026-03-13T23:46:56.875977Z","withdrawn":"2026-09-07T02:03:45.389168123Z","related":["CVE-2026-31812","GHSA-6xvm-j4wr-6v98"],"affected":[{"package":{"name":"apollo-router-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apollo-router-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"asciinema","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/asciinema"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"berg","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/berg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"cargo-audit","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cargo-audit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"fnm","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/fnm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"garage-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/garage-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"komodo-cli","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/komodo-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.5-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"komodo-core","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/komodo-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.5-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"komodo-periphery","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/komodo-periphery"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.5-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"lychee","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/lychee"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"nushell","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nushell"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.111.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"nushell-plugins","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nushell-plugins"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.111.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"parseable","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/parseable"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.14-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"pixi","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pixi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.65.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"py3.10-hf-xet","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-hf-xet"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"py3.11-hf-xet","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-hf-xet"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"py3.12-hf-xet","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-hf-xet"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"py3.13-hf-xet","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-hf-xet"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"qdrant","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/qdrant"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"samply","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/samply"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"sccache","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sccache"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"uv","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/uv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.9-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"vector","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vector"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.54.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"wadm","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wadm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"wash","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wash"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.39.0-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"wasmcloud","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wasmcloud"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"xh","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/xh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"zed","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zed"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.226.5-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"zizmor","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zizmor"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"zola","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zola"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"berg","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/berg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"cargo-audit","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/cargo-audit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"lychee","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/lychee"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"nushell","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/nushell"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.111.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"nushell-plugins","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/nushell-plugins"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.111.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"parseable","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/parseable"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.14-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"pixi","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pixi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.65.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"py3.10-hf-xet","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-hf-xet"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"py3.11-hf-xet","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.11-hf-xet"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"py3.12-hf-xet","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.12-hf-xet"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"py3.13-hf-xet","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.13-hf-xet"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"qdrant","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/qdrant"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"samply","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/samply"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"sccache","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sccache"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"uv","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/uv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.9-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"vector","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vector"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.54.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"wadm","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/wadm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"wash","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/wash"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.39.0-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"wasmcloud","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/wasmcloud"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"xh","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/xh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"zed","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zed"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.226.5-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"zizmor","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zizmor"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}},{"package":{"name":"zola","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zola"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cq2m-2ghh-c6hg.json"}}],"schema_version":"1.7.5"}