{"id":"CGA-mqrh-xq26-pgmq","modified":"2026-09-07T01:44:01.370111518Z","published":"2026-04-16T11:30:06Z","upstream":["GHSA-g4vj-cjjj-v7hg"],"affected":[{"package":{"name":"dotnet-bootstrap-8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dotnet-bootstrap-8?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.127-r0"}]}],"ecosystem_specific":{"components":[{"latest_event_timestamp":"2026-05-13T01:59:40Z","component_name":"NuGet.Protocol","component_version":"6.8.1-rc.2","component_type":"dotnet","component_location":"/usr/share/dotnet-bootstrap/dotnet/sdk/8.0.125/dotnet.deps.json","component_purl":"pkg:nuget/NuGet.Protocol@6.8.1-rc.2","latest_event_status":"fixed"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mqrh-xq26-pgmq.json"}},{"package":{"name":"dotnet-bootstrap-8","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/dotnet-bootstrap-8?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.127-r0"}]}],"ecosystem_specific":{"components":[{"latest_event_timestamp":"2026-05-13T01:59:40Z","component_name":"NuGet.Protocol","component_version":"6.8.1-rc.2","component_type":"dotnet","component_location":"/usr/share/dotnet-bootstrap/dotnet/sdk/8.0.125/dotnet.deps.json","component_purl":"pkg:nuget/NuGet.Protocol@6.8.1-rc.2","latest_event_status":"fixed"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mqrh-xq26-pgmq.json"}}],"schema_version":"1.9.0"}