{"id":"CGA-fwc2-7qwx-g5r4","modified":"2026-08-07T08:00:30.839842266Z","published":"2026-06-25T20:18:07Z","withdrawn":"2026-08-07T08:00:30.839842140Z","related":["GHSA-47qp-hqvx-6r3f"],"affected":[{"package":{"name":"apache-camel-karavan-devmode","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-camel-karavan-devmode"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"apache-hop","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-hop"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"apache-hop-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-hop-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"apache-nifi-toolkit","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-nifi-toolkit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"apache-pulsar-4.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.11-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"apache-pulsar-4.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"apache-pulsar-fips-4.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-fips-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.11-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"apache-pulsar-fips-4.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-fips-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"confluent-kafka","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/confluent-kafka"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0.269-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"confluent-kafka-jre-bcfips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/confluent-kafka-jre-bcfips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0.270-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"druid","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"37.0.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"hadoop-client-modules","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/hadoop-client-modules"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.6-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"kafka-4.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"kafka-4.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-4.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"kafka-4.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"kafka-4.3-openjdk-17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-4.3-openjdk-17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"kafka-4.3-openjdk-21","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-4.3-openjdk-21"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"kafka-4.3-openjdk-25","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-4.3-openjdk-25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"kafka-fips-4.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-fips-4.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"kafka-fips-4.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-fips-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"spark-fips-3.5-scala-2.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-fips-3.5-scala-2.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.8-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"spark-fips-3.5-scala-2.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-fips-3.5-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.8-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"spark-kubernetes-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-kubernetes-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"spark-kubernetes-operator-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-kubernetes-operator-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"tez","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tez"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.5-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"zookeeper-3.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zookeeper-3.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.6-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"zookeeper-3.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zookeeper-3.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.5-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"zookeeper-fips-3.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zookeeper-fips-3.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.6-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"zookeeper-fips-3.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zookeeper-fips-3.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.5-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"apache-nifi-toolkit","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-nifi-toolkit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"apache-pulsar-4.2","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-pulsar-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"confluent-kafka","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/confluent-kafka"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0.269-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"druid","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"37.0.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"kafka-4.0","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kafka-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"kafka-4.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kafka-4.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"kafka-4.2","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kafka-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"tez","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tez"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.5-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}},{"package":{"name":"zookeeper-3.9","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zookeeper-3.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.5-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-fwc2-7qwx-g5r4.json"}}],"schema_version":"1.7.5"}