{"id":"CGA-mwr9-whh6-3ppf","modified":"2026-09-07T02:04:18.658428124Z","published":"2026-01-29T00:49:59.846961Z","withdrawn":"2026-09-07T02:04:18.658427913Z","related":["CVE-2025-62727","GHSA-7f5h-v6xp-fcq8"],"affected":[{"package":{"name":"airflow-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"airflow-core-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-core-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"k8s-sidecar","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/k8s-sidecar"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-agent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-agent-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-agent-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-manager","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-manager"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-manager-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-manager-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-qpext","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-qpext"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-qpext-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-qpext-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-router","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-router"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-router-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-router-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-storage-controller","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-storage-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"mlflow","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"mlflow-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"nemo","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nemo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"open-webui","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/open-webui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.34-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"open-webui-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/open-webui-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.34-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"reflex","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/reflex"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.17-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"airflow-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"k8s-sidecar","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/k8s-sidecar"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-agent","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-agent-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-agent-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-manager","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-manager"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-manager-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-manager-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-qpext","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-qpext"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-qpext-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-qpext-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-router","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-router"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-router-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-router-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"kserve-storage-controller","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-storage-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"mlflow","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"mlflow-bitnami","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"open-webui","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/open-webui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.34-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"open-webui-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/open-webui-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.34-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}},{"package":{"name":"reflex","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/reflex"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.17-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mwr9-whh6-3ppf.json"}}],"schema_version":"1.7.5"}