{"id":"CGA-m6pq-5h99-86x5","modified":"2026-09-07T02:04:15.201388548Z","published":"2026-01-29T00:47:40.442269Z","withdrawn":"2026-09-07T02:04:15.201388265Z","related":["CVE-2025-66414","GHSA-w48q-cv73-mx4w"],"affected":[{"package":{"name":"kibana-9.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"kibana-9.1-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.1-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"kibana-9.1-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.1-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"kibana-9.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"kibana-9.2-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.2-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"langfuse-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.137.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"langfuse-3-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-3-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.137.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"langfuse-3-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.137.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"langfuse-web-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-web-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.137.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"langfuse-worker-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-worker-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.137.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"librechat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/librechat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"librechat-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/librechat-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"librechat-dev","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/librechat-dev"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-alerting-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-alerting-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-anomaly-detection-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-maps","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-maps"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-notifications","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-observability","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-observability"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-query-workbench","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-query-workbench"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-search-relevance","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-search-relevance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-visualizations","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-visualizations"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-alerting-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-fips-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-maps","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-maps"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-notifications","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-observability","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-observability"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-query-workbench","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-query-workbench"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-search-relevance","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-search-relevance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-visualizations","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-visualizations"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-index-management-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-fips-ml-commons-dashboards","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-ml-commons-dashboards"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-analytics-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-fips-security-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-index-management-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-index-management-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-ml-commons-dashboards","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-ml-commons-dashboards"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-security-analytics-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-security-analytics-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"opensearch-dashboards-2-security-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-security-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"langfuse-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/langfuse-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.137.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"langfuse-3-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/langfuse-3-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.137.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"langfuse-3-worker","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/langfuse-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.137.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"langfuse-web-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/langfuse-web-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.137.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}},{"package":{"name":"langfuse-worker-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/langfuse-worker-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.137.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m6pq-5h99-86x5.json"}}],"schema_version":"1.7.5"}