{"id":"CGA-h8v7-4923-8jff","modified":"2026-09-07T02:04:00.312635983Z","published":"2026-01-29T00:49:43.156813Z","withdrawn":"2026-09-07T02:04:00.312635845Z","related":["CVE-2024-49767","GHSA-q34m-jh98-gwm2"],"affected":[{"package":{"name":"airflow-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"airflow-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"airflow-core-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-core-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"emissary","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/emissary"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"emissary-apiext","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/emissary-apiext"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"emissary-oci-entrypoint","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/emissary-oci-entrypoint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"kubeflow-jupyter-web-app","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-jupyter-web-app"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"kubeflow-pipelines-visualization-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-pipelines-visualization-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"kubeflow-volumes-web-app","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-volumes-web-app"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"mlflow","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.21.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"mlflow-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.21.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.21.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"py3-werkzeug","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-werkzeug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.6-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"py3.10-ambassador","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"py3.11-ambassador","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"py3.12-ambassador","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"py3.13-ambassador","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"superset","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/superset"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"superset-ci","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/superset-ci"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"superset-entrypoint","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/superset-entrypoint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"superset-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/superset-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"airflow-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"emissary","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/emissary"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"emissary-apiext","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/emissary-apiext"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"emissary-oci-entrypoint","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/emissary-oci-entrypoint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"kubeflow-jupyter-web-app","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-jupyter-web-app"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"kubeflow-pipelines-visualization-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-pipelines-visualization-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"kubeflow-volumes-web-app","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-volumes-web-app"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"mlflow","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.21.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"mlflow-bitnami","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.21.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.21.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"py3-werkzeug","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-werkzeug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.6-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"py3.10-ambassador","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"py3.11-ambassador","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.11-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"py3.12-ambassador","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.12-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"py3.13-ambassador","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.13-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"superset","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/superset"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"superset-ci","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/superset-ci"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"superset-entrypoint","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/superset-entrypoint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}},{"package":{"name":"superset-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/superset-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h8v7-4923-8jff.json"}}],"schema_version":"1.7.5"}