{"id":"CGA-v69j-gm3c-wjp9","modified":"2026-04-10T14:18:21.583032Z","published":"2026-02-28T06:40:48.316741Z","related":["CVE-2026-27903","GHSA-7r86-cg39-jmmj"],"affected":[{"package":{"name":"actions-runner","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/actions-runner"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.332.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"arangodb-3.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/arangodb-3.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"arangodb-3.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/arangodb-3.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.7.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"code-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/code-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.109.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"emscripten","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/emscripten"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"eslint","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/eslint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"graalvm-25-ce-nodejs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/graalvm-25-ce-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"kibana-8.17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"kibana-8.17-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.17-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"kibana-8.17-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.17-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"kibana-8.19","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.19"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.12-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"kibana-8.19-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.19-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.12-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"kibana-8.19-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.19-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.12-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"kibana-9.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"kibana-9.0-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.0-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"kibana-9.0-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.0-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"kibana-9.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.10-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"kibana-9.1-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.1-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.10-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"kibana-9.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.5-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"kibana-9.2-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.2-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.5-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"kibana-9.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"kibana-9.3-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.3-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"langfuse-2-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-2-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"lerna","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/lerna"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.5-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"librechat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/librechat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"node-gyp","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/node-gyp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"npm","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.11.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"opensearch-dashboards-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"opensearch-dashboards-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"opensearch-dashboards-3-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"opensearch-dashboards-3-fips-dashboards-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"opentelemetry-auto-instrumentations-node","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentelemetry-auto-instrumentations-node"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.70.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"prism","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/prism"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.3-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.224.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"renovate","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/renovate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.49.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"serve","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/serve"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.6-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"tileserver-gl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tileserver-gl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"tileserver-gl-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tileserver-gl-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"vitess-22","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vitess-22"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.4-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"vitess-23","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vitess-23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.3-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"code-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/code-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.109.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"eslint","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/eslint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"lerna","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/lerna"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.5-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"node-gyp","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/node-gyp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"npm","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.11.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"opensearch-dashboards-2","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-reporting","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"opensearch-dashboards-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-reporting","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"prism","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/prism"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.3-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.224.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"renovate","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/renovate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.49.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"serve","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/serve"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.6-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"tileserver-gl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tileserver-gl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"vitess-22","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vitess-22"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.4-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}},{"package":{"name":"vitess-23","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vitess-23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.3-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v69j-gm3c-wjp9.json"}}],"schema_version":"1.7.5"}