{"id":"CGA-mmpp-xmw8-4r94","modified":"2026-09-07T02:04:16.718715636Z","published":"2026-01-09T12:35:38.984525Z","withdrawn":"2026-09-07T02:04:16.718715475Z","related":["CVE-2024-36621","GHSA-2mj3-vfvx-fc43","GO-2024-3304"],"affected":[{"package":{"name":"cmctl-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cmctl-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.17-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"docker-machine-driver-harvester","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/docker-machine-driver-harvester"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"kubevela","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubevela"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"kubevela-vela-cli","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubevela-vela-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"kubevela-vela-core","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubevela-vela-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"kubevela-vela-core-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubevela-vela-core-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"pulumi","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.142.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"pulumi-language-go","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi-language-go"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.142.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.142.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"pulumi-language-python","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi-language-python"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.142.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"py3-docker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"py3.10-docker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"py3.11-docker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"py3.12-docker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"py3.13-docker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"rancher-2.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-2.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"rancher-2.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-2.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"rancher-agent-2.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-agent-2.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"rancher-agent-2.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-agent-2.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"rancher-agent-2.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-agent-2.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"rancher-machine","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-machine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0.137-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"docker-machine-driver-harvester","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/docker-machine-driver-harvester"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"kubevela","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubevela"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"kubevela-vela-cli","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubevela-vela-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"kubevela-vela-core","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubevela-vela-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"kubevela-vela-core-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubevela-vela-core-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"pulumi","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.142.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"pulumi-language-go","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi-language-go"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.142.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.142.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"pulumi-language-python","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi-language-python"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.142.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"py3-docker","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"py3.10-docker","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"py3.11-docker","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.11-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"py3.12-docker","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.12-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"py3.13-docker","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.13-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"rancher-2.11","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rancher-2.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}},{"package":{"name":"rancher-machine","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rancher-machine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0.137-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mmpp-xmw8-4r94.json"}}],"schema_version":"1.7.5"}