{"id":"CGA-mf45-rchg-pq3p","modified":"2026-09-07T02:04:15.980292222Z","published":"2026-07-21T18:55:36Z","withdrawn":"2026-09-07T02:04:15.980291922Z","related":["CVE-2026-12590","GHSA-v422-hmwv-36x6"],"affected":[{"package":{"name":"arangodb-3.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/arangodb-3.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14.5-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"argo-workflows-ui-3.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflows-ui-3.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.19-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"argo-workflows-ui-3.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflows-ui-3.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.17-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"argo-workflows-ui-4.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflows-ui-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.8-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"azurite","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/azurite"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.35.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"code-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/code-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.130.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"gitlab-rails-ce-19.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.3.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.3.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"json-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/json-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.4-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"kibana-9.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r18"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"kibana-9.2-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.2-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r18"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"kibana-9.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.8-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"kibana-9.3-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.3-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.8-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"kibana-9.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.4-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"kibana-9.4-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.4-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.4-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"kubeflow-centraldashboard","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-centraldashboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"kubeflow-pipelines-frontend","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-pipelines-frontend"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"kubescape-grype-offline-db","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubescape-grype-offline-db"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0_git20250804-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"langfuse-2-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-2-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r37"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"langfuse-3-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.224.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"langfuse-fips-2-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-2-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r41"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"langfuse-fips-3-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.224.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"opensearch-dashboards-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-r22"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"pelias-api","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pelias-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"redisinsight","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/redisinsight"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"sqlpad","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sqlpad"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.7-r29"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"thingsboard-tb-js-executor-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard-tb-js-executor-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1.3-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"thingsboard-tb-web-ui-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard-tb-web-ui-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1.3-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"tileserver-gl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tileserver-gl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"tileserver-gl-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tileserver-gl-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.0-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"unleash","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/unleash"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.3-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"unleash-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/unleash-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.3-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"unleash-proxy","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/unleash-proxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.19-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"wazuh-dashboard","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.6-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"wazuh-dashboard-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.6-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"wazuh-dashboard-security-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.7-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"wazuh-dashboard-security-plugin-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.7-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"argo-workflows-ui-3.7","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-workflows-ui-3.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.17-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"argo-workflows-ui-4.0","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-workflows-ui-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.8-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"code-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/code-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.130.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"json-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/json-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.4-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"kubeflow-centraldashboard","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-centraldashboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"kubeflow-pipelines-frontend","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-pipelines-frontend"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"langfuse-3-worker","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/langfuse-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.224.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"sqlpad","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sqlpad"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.7-r29"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}},{"package":{"name":"tileserver-gl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tileserver-gl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mf45-rchg-pq3p.json"}}],"schema_version":"1.9.0"}