{"id":"CGA-jg4m-jpv8-h6f8","modified":"2026-09-07T02:04:09.082952506Z","published":"2026-02-20T17:00:33.550271Z","withdrawn":"2026-09-07T02:04:09.082952289Z","related":["CVE-2026-27199","GHSA-29vq-49wr-vm6x"],"affected":[{"package":{"name":"airflow-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"airflow-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"airflow-core-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-core-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"kubeflow-pipelines-visualization-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-pipelines-visualization-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"kubeflow-volumes-web-app","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-volumes-web-app"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"litellm","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/litellm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.81.12.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"localstack","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/localstack"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"mlflow","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"open-webui","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/open-webui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"py3.10-ambassador","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"py3.11-ambassador","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"py3.11-azure-functions-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-azure-functions-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.43.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"py3.12-ambassador","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"py3.12-azure-functions-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-azure-functions-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.43.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"py3.13-ambassador","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"py3.13-azure-functions-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-azure-functions-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.43.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"superset-5.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/superset-5.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"superset-6.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/superset-6.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"tensorflow-cpu-jupyter","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tensorflow-cpu-jupyter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"tensorflow-gpu-jupyter","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tensorflow-gpu-jupyter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"airflow-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"kubeflow-pipelines-visualization-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-pipelines-visualization-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"kubeflow-volumes-web-app","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-volumes-web-app"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"mlflow","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"open-webui","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/open-webui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"py3.10-ambassador","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"py3.11-ambassador","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.11-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"py3.12-ambassador","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.12-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"py3.13-ambassador","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.13-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"superset-5.0","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/superset-5.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"superset-6.0","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/superset-6.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}},{"package":{"name":"tensorflow-cpu-jupyter","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tensorflow-cpu-jupyter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-jg4m-jpv8-h6f8.json"}}],"schema_version":"1.7.5"}