{"id":"CGA-h2pq-vr45-j6pp","modified":"2026-09-07T02:03:58.827884990Z","published":"2026-05-07T00:45:56.934867Z","withdrawn":"2026-09-07T02:03:58.827884859Z","related":["CVE-2026-41409","GHSA-f2wh-grmh-r6jm"],"affected":[{"package":{"name":"apache-hop","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-hop"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}},{"package":{"name":"apache-hop-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-hop-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}},{"package":{"name":"apache-nifi","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-nifi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}},{"package":{"name":"guacamole-client-extensions","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/guacamole-client-extensions"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}},{"package":{"name":"hadoop-fips-3.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/hadoop-fips-3.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}},{"package":{"name":"jenkins-2-openjdk-21","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jenkins-2-openjdk-21"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.564-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}},{"package":{"name":"jenkins-2-openjdk-25","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jenkins-2-openjdk-25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.564-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}},{"package":{"name":"jenkins-2.541","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jenkins-2.541"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.541.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}},{"package":{"name":"jenkins-2.541-openjdk-17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jenkins-2.541-openjdk-17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.541.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}},{"package":{"name":"jenkins-2.541-openjdk-21","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jenkins-2.541-openjdk-21"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.541.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}},{"package":{"name":"jenkins-2.541-openjdk-25","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jenkins-2.541-openjdk-25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.541.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}},{"package":{"name":"jenkins-2.555","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jenkins-2.555"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.555.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}},{"package":{"name":"jenkins-2.555-openjdk-21","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jenkins-2.555-openjdk-21"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.555.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}},{"package":{"name":"jenkins-2.555-openjdk-25","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jenkins-2.555-openjdk-25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.555.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}},{"package":{"name":"apache-nifi","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-nifi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}},{"package":{"name":"jenkins-2-openjdk-21","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/jenkins-2-openjdk-21"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.564-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}},{"package":{"name":"jenkins-2-openjdk-25","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/jenkins-2-openjdk-25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.564-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h2pq-vr45-j6pp.json"}}],"schema_version":"1.8.0"}