{"id":"CGA-qc9x-hvww-cfp2","modified":"2026-01-28T03:31:13.531440Z","published":"2025-08-10T12:17:43.656440Z","withdrawn":"2026-01-28T03:31:13.531440Z","related":["CGA-qc9x-hvww-cfp2","CVE-2025-47907","GHSA-j5pm-7495-qmr3"],"affected":[{"package":{"name":"vendir","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vendir"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-qc9x-hvww-cfp2.json"}},{"package":{"name":"vendir","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vendir"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-qc9x-hvww-cfp2.json"}}],"schema_version":"1.7.3"}