{"id":"CGA-mg56-r53j-jvxx","modified":"2026-09-23T16:30:40.027482583Z","published":"2026-09-21T18:34:13Z","upstream":["GHSA-cq8v-f236-94qc"],"affected":[{"package":{"name":"ztunnel-1.31","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ztunnel-1.31?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"ecosystem_specific":{"components":[{"latest_event_timestamp":"2026-09-23T12:48:38Z","component_name":"rand","component_version":"0.7.3","component_type":"rust-crate","component_location":"/usr/bin/ztunnel","component_purl":"pkg:cargo/rand@0.7.3","latest_event_status":"pending_upstream_fix"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mg56-r53j-jvxx.json"}}],"schema_version":"1.9.0"}