{"id":"CGA-h3gg-9463-wvjx","modified":"2026-01-28T03:26:26.934588Z","published":"2025-06-13T18:29:21.434237Z","withdrawn":"2026-01-28T03:26:26.934588Z","related":["CGA-h3gg-9463-wvjx","CVE-2025-27817","GHSA-vgq5-3255-v292"],"affected":[{"package":{"name":"opensearch-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-alerting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-alerting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-analysis-icu","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-analysis-icu"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-analysis-kuromoji","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-analysis-kuromoji"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-analysis-nori","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-analysis-nori"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-analysis-phonetic","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-analysis-phonetic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-analysis-smartcn","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-analysis-smartcn"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-analysis-stempel","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-analysis-stempel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-analysis-ukrainian","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-analysis-ukrainian"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-anomaly-detection","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-anomaly-detection"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-asynchronous-search","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-asynchronous-search"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-cross-cluster-replication","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-cross-cluster-replication"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-crypto-kms","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-crypto-kms"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-custom-codecs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-custom-codecs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-discovery-azure-classic","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-discovery-azure-classic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-discovery-ec2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-discovery-ec2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-discovery-gce","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-discovery-gce"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-entrypoint-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-entrypoint-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-geospatial","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-geospatial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-identity-shiro","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-identity-shiro"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-index-management","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-index-management"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-ingest-attachment","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-ingest-attachment"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-job-scheduler","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-job-scheduler"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-k-nn","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-k-nn"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-mapper-annotated-text","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-mapper-annotated-text"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-mapper-murmur3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-mapper-murmur3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-mapper-size","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-mapper-size"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-ml-commons","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-ml-commons"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-neural-search","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-neural-search"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-notifications","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-observability","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-observability"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-performance-analyzer","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-performance-analyzer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-repository-azure","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-repository-azure"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-repository-gcs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-repository-gcs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-repository-s3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-repository-s3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-security","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-security"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-security-analytics","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-security-analytics"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-sql","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-sql"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-store-smb","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-store-smb"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-telemetry-otel","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-telemetry-otel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}},{"package":{"name":"opensearch-2-transport-nio","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-transport-nio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h3gg-9463-wvjx.json"}}],"schema_version":"1.7.3"}