{"id":"CGA-r8wc-cfj6-3c4v","modified":"2026-09-07T02:04:27.207621784Z","published":"2026-03-07T17:00:04.868109Z","withdrawn":"2026-09-07T02:04:27.207621634Z","related":["CVE-2026-1605","GHSA-xxh7-fcf3-rj7f"],"affected":[{"package":{"name":"akhq","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/akhq"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"apache-hop","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-hop"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"apache-hop-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-hop-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"apache-jena-fuseki","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-jena-fuseki"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"apache-pulsar-4.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"apache-pulsar-fips-4.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-fips-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"confluent-kafka","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/confluent-kafka"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.0.375-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"confluent-kafka-jre-bcfips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/confluent-kafka-jre-bcfips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.0.411-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"dependency-track","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dependency-track"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"dependency-track-apiserver","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dependency-track-apiserver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"dependency-track-bundled","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dependency-track-bundled"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"druid","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"36.0.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"jenkins-2.541","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jenkins-2.541"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.541.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"jenkins-2.541-openjdk-17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jenkins-2.541-openjdk-17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.541.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"jenkins-2.541-openjdk-21","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jenkins-2.541-openjdk-21"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.541.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"kafka-4.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"kafka-4.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-4.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"kafka-4.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"kafka-fips-4.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-fips-4.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"kafka-fips-4.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-fips-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"neo4j-5.26","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/neo4j-5.26"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.21-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"solr","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/solr"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"strimzi-kafka-operator-cluster-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-cluster-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.50.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-agent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.50.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-init","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-init"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.50.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"strimzi-kafka-operator-topic-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-topic-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.50.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"strimzi-kafka-operator-tracing-agent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-tracing-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.50.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"strimzi-kafka-operator-user-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-user-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.50.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"trino","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"479-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"akhq","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/akhq"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"apache-pulsar-4.2","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-pulsar-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"confluent-kafka","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/confluent-kafka"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.0.375-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"dependency-track","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/dependency-track"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"dependency-track-bundled","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/dependency-track-bundled"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"druid","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"36.0.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"kafka-4.0","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kafka-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"kafka-4.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kafka-4.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"kafka-4.2","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kafka-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"neo4j-5.26","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/neo4j-5.26"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.21-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"solr","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/solr"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"strimzi-kafka-operator-cluster-operator","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-cluster-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.50.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-agent","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.50.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-init","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-init"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.50.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"strimzi-kafka-operator-topic-operator","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-topic-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.50.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"strimzi-kafka-operator-tracing-agent","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-tracing-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.50.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"strimzi-kafka-operator-user-operator","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-user-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.50.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}},{"package":{"name":"trino","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"479-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-r8wc-cfj6-3c4v.json"}}],"schema_version":"1.7.5"}