{"id":"CGA-m6hw-g3vp-6j4c","modified":"2026-09-07T02:04:15.295434892Z","published":"2026-03-10T11:30:05.149299Z","withdrawn":"2026-09-07T02:04:15.295434713Z","related":["CVE-2026-24308","GHSA-crhr-qqj8-rpxc"],"affected":[{"package":{"name":"akhq","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/akhq"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"apache-activemq-artemis","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-activemq-artemis"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.53.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"apache-nifi","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-nifi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"apache-pulsar-4.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"apache-pulsar-4.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-4.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"apache-pulsar-fips-4.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-fips-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"apache-pulsar-fips-4.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-fips-4.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"druid","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"36.0.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"kafka-3.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-3.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.1-r53"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"kafka-3.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-3.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"kserve-modelmesh","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-modelmesh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-r26"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"pinot","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pinot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"seata-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/seata-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"solr","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/solr"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"spark-3.5-scala-2.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-3.5-scala-2.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.8-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"spark-3.5-scala-2.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-3.5-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.8-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"spark-4.0-scala-2.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-4.0-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"spark-4.1-scala-2.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-4.1-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"spark-fips-3.5-scala-2.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-fips-3.5-scala-2.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.4-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"spark-fips-3.5-scala-2.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-fips-3.5-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.4-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"spark-fips-4.1-scala-2.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-fips-4.1-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"spark-kubernetes-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-kubernetes-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"spark-kubernetes-operator-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-kubernetes-operator-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-thirdparty-libs-cc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.51.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"tez","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tez"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.5-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"thingsboard-tb-mqtt-transport","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard-tb-mqtt-transport"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"thingsboard-tb-node","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard-tb-node"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"trino-plugin-kafka","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-kafka"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"480-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"trino-plugin-kafka-event-listener","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-kafka-event-listener"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"480-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"trino-plugin-pinot","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-pinot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"480-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"trino-plugin-ranger","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-ranger"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"480-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"wso2is","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wso2is"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"zookeeper-3.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zookeeper-3.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"zookeeper-fips-3.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zookeeper-fips-3.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"akhq","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/akhq"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"apache-activemq-artemis","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-activemq-artemis"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.53.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"apache-nifi","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-nifi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"apache-pulsar-4.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-pulsar-4.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"druid","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"36.0.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"kserve-modelmesh","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-modelmesh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-r26"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"solr","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/solr"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"spark-4.0-scala-2.13","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/spark-4.0-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"spark-4.1-scala-2.13","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/spark-4.1-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-thirdparty-libs-cc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.51.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"tez","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tez"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.5-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"thingsboard-tb-mqtt-transport","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/thingsboard-tb-mqtt-transport"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"thingsboard-tb-node","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/thingsboard-tb-node"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"trino-plugin-kafka","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-kafka"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"480-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"trino-plugin-kafka-event-listener","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-kafka-event-listener"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"480-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"trino-plugin-pinot","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-pinot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"480-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"trino-plugin-ranger","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-ranger"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"480-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}},{"package":{"name":"zookeeper-3.9","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zookeeper-3.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6hw-g3vp-6j4c.json"}}],"schema_version":"1.8.0"}