{"id":"CGA-ph39-whqg-g86m","modified":"2026-09-07T02:04:17.334630617Z","published":"2026-08-07T19:04:48Z","withdrawn":"2026-09-07T02:04:17.334630396Z","related":["CVE-2026-71497","GHSA-pmhh-3w7g-xqp8"],"affected":[{"package":{"name":"apache-hop","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-hop"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.1-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"apache-hop-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-hop-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.1-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"apache-tika-3.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-tika-3.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-r29"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"apache-tika-3.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-tika-3.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r36"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"apache-tika-3.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-tika-3.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-r16"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"apache-tika-3.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-tika-3.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"apache-tika-fips-3.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-tika-fips-3.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"apache-tika-fips-3.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-tika-fips-3.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"apache-tika-fips-3.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-tika-fips-3.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"apache-tika-fips-3.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-tika-fips-3.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"conductor","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/conductor"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.31.0-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"conductor-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/conductor-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.31.0-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"copybara","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/copybara"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260727-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"copybara-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/copybara-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260727-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-8.19","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-8.19"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.19-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-8.19-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-8.19-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.19-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-8.19-iamguarded-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-8.19-iamguarded-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.19-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-9.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-9.2-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-9.2-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-9.2-iamguarded-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-9.2-iamguarded-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-9.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-9.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.8-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-9.3-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-9.3-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.8-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-9.3-iamguarded-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-9.3-iamguarded-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.7-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-9.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-9.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-9.4-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-9.4-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-9.4-iamguarded-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-9.4-iamguarded-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.5-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-9.5-iamguarded-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-9.5-iamguarded-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-fips-8.19","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-fips-8.19"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.19-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-fips-9.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-fips-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-fips-9.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-fips-9.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.7-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-fips-9.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-fips-9.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.5-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"elasticsearch-fips-9.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-fips-9.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"gradle-8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gradle-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.5-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"gradle-9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gradle-9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"jbang","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jbang"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.141.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"metabase","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/metabase"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.63.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"nextflow","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nextflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.04.6-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"opensearch-2-ingest-attachment","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-ingest-attachment"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"opensearch-2-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"opensearch-3-ingest-attachment","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-3-ingest-attachment"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"opensearch-3-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-3-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"opensearch-fips-3-ingest-attachment","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-fips-3-ingest-attachment"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"opensearch-fips-3-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-fips-3-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"scala-3.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/scala-3.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.8-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"spdx-tools-java","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spdx-tools-java"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.7-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"wazuh-indexer-plugin-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-indexer-plugin-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.7-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"apache-tika-3.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-tika-3.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r36"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"apache-tika-3.2","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-tika-3.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-r16"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"apache-tika-3.3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-tika-3.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"gradle-8","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gradle-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.5-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"gradle-9","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gradle-9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"nextflow","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/nextflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.04.6-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"opensearch-3-ingest-attachment","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-3-ingest-attachment"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"opensearch-3-reporting","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-3-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}},{"package":{"name":"spdx-tools-java","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/spdx-tools-java"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.7-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ph39-whqg-g86m.json"}}],"schema_version":"1.9.0"}