{"id":"CGA-h3cf-x65w-2hfq","modified":"2026-09-07T02:03:59.365809881Z","published":"2026-01-29T00:47:30.772037Z","withdrawn":"2026-09-07T02:03:59.365809743Z","related":["CVE-2025-49146","GHSA-hq9p-pm7w-8p54"],"affected":[{"package":{"name":"apicurio-registry","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apicurio-registry"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.9-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"apicurio-registry-nginx-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apicurio-registry-nginx-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.9-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"apicurio-registry-ui","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apicurio-registry-ui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.9-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"camunda-zeebe-8.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.6.18-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"camunda-zeebe-8.6-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.6-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.6.18-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"keycloak","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"keycloak-bitnami-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-bitnami-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"keycloak-bitnami-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-bitnami-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.5-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"keycloak-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"keycloak-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.5-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"keycloak-fips-bitnami-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-fips-bitnami-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.5-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"keycloak-fips-policy-140-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-fips-policy-140-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.5-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"keycloak-fips-policy-140-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-fips-policy-140-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.5-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"keycloak-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"keycloak-iamguarded-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-iamguarded-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.5-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"liquibase","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/liquibase"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.32.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"sonarqube-10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sonarqube-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.5.0.107428-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"sonarqube-10-docker-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sonarqube-10-docker-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.5.0.107428-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"sonarqube-10-scripts","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sonarqube-10-scripts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.5.0.107428-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"apicurio-registry","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apicurio-registry"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.9-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"apicurio-registry-nginx-config","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apicurio-registry-nginx-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.9-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"apicurio-registry-ui","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apicurio-registry-ui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.9-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"keycloak","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/keycloak"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"keycloak-bitnami-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/keycloak-bitnami-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"keycloak-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/keycloak-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"keycloak-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/keycloak-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.2.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"liquibase","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/liquibase"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.32.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"sonarqube-10","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sonarqube-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.5.0.107428-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"sonarqube-10-docker-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sonarqube-10-docker-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.5.0.107428-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}},{"package":{"name":"sonarqube-10-scripts","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sonarqube-10-scripts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.5.0.107428-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3cf-x65w-2hfq.json"}}],"schema_version":"1.7.3"}