{"id":"CGA-mvrp-qg39-5fq7","modified":"2026-09-07T02:04:18.266289763Z","published":"2026-05-21T05:18:08Z","withdrawn":"2026-09-07T02:04:18.266289604Z","related":["CVE-2026-45205","GHSA-337m-mw94-2v6g"],"affected":[{"package":{"name":"apache-activemq-artemis","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-activemq-artemis"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"apache-hop","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-hop"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-r16"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"apache-hop-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-hop-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-r16"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"apache-nifi","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-nifi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"apache-pulsar-4.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"apache-pulsar-4.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"apache-pulsar-fips-4.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-fips-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"apache-pulsar-fips-4.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-fips-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"apicurio-registry","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apicurio-registry"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"cassandra-reaper","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cassandra-reaper"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"druid","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"37.0.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"flyway","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flyway"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.8.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"hadoop-client-modules","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/hadoop-client-modules"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.6-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"hadoop-fips-3.4.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/hadoop-fips-3.4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"neo4j-5.26","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/neo4j-5.26"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.25-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"pinot","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pinot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"pinot-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pinot-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"spark-fips-4.1-scala-2.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-fips-4.1-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"spark-kubernetes-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-kubernetes-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"spark-kubernetes-operator-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-kubernetes-operator-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"tez","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tez"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.5-r18"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"trino-plugin-pinot","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-pinot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"trino-plugin-ranger","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-ranger"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"zipkin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zipkin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"zipkin-slim","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zipkin-slim"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"apache-activemq-artemis","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-activemq-artemis"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"apache-nifi","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-nifi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"apache-pulsar-4.2","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-pulsar-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"apicurio-registry","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apicurio-registry"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"cassandra-reaper","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/cassandra-reaper"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"druid","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"37.0.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"flyway","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/flyway"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.8.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"tez","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tez"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.5-r18"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"trino-plugin-pinot","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-pinot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"trino-plugin-ranger","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-ranger"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"zipkin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zipkin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}},{"package":{"name":"zipkin-slim","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zipkin-slim"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mvrp-qg39-5fq7.json"}}],"schema_version":"1.9.0"}