{"id":"CGA-vjxv-mx2c-9vm3","modified":"2026-09-07T02:04:29.738060723Z","published":"2026-09-04T08:30:40Z","withdrawn":"2026-09-07T02:04:29.738060358Z","related":["CVE-2026-79921","GHSA-6c5v-hqjr-5xxp"],"affected":[{"package":{"name":"argo-events","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-events"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.11-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"argo-events-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-events-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.11-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"bento","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/bento"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"bento-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/bento-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"dapr-daprd-1.16","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dapr-daprd-1.16"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.19-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"dapr-daprd-1.17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dapr-daprd-1.17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"dapr-daprd-1.18","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dapr-daprd-1.18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"dapr-daprd-fips-1.16","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dapr-daprd-fips-1.16"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.19-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"dapr-daprd-fips-1.17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dapr-daprd-fips-1.17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"falcosidekick","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/falcosidekick"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"falcosidekick-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/falcosidekick-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"guac","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/guac"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r33"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"guacingest","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/guacingest"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r33"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"guacone","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/guacone"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r33"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"keda-2.18","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keda-2.18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.3-r17"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"keda-2.18-metrics-apiserver","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keda-2.18-metrics-apiserver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.3-r17"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"keda-2.19-metrics-apiserver","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keda-2.19-metrics-apiserver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.0-r30"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"keda-2.20","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keda-2.20"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.2-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"keda-2.20-metrics-apiserver","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keda-2.20-metrics-apiserver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.2-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"keda-fips-2.18","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keda-fips-2.18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.3-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"keda-fips-2.19","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keda-fips-2.19"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.0-r21"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"keda-fips-2.19-metrics-apiserver","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keda-fips-2.19-metrics-apiserver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.0-r21"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"keda-fips-2.20","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keda-fips-2.20"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.2-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"keda-fips-2.20-metrics-apiserver","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keda-fips-2.20-metrics-apiserver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.2-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"minio","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/minio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20260717.120751-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"minio-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/minio-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20260717.120751-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"nuclio-controller","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nuclio-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.6-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"nuclio-controller-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nuclio-controller-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.6-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"opentelemetry-collector-contrib","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentelemetry-collector-contrib"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.160.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"opentelemetry-collector-contrib-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentelemetry-collector-contrib-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.160.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"sftpgo-plugin-pubsub","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sftpgo-plugin-pubsub"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"telegraf-1.36","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/telegraf-1.36"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.4-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"telegraf-1.37","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/telegraf-1.37"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37.3-r30"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"telegraf-1.38","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/telegraf-1.38"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.4-r27"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"trufflehog","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trufflehog"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.97.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"trufflehog-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trufflehog-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.97.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"versitygw","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/versitygw"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"versitygw-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/versitygw-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"argo-events","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-events"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.11-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"bento","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/bento"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"dapr-daprd-1.16","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/dapr-daprd-1.16"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.19-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"dapr-daprd-1.17","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/dapr-daprd-1.17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"falcosidekick","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/falcosidekick"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"guac","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/guac"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r33"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"guacingest","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/guacingest"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r33"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"guacone","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/guacone"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r33"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"keda-2.19-metrics-apiserver","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/keda-2.19-metrics-apiserver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.0-r30"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"keda-2.20","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/keda-2.20"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.2-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"keda-2.20-metrics-apiserver","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/keda-2.20-metrics-apiserver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.2-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"minio","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/minio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20260717.120751-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"opentelemetry-collector-contrib","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentelemetry-collector-contrib"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.160.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"sftpgo-plugin-pubsub","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sftpgo-plugin-pubsub"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"telegraf-1.36","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/telegraf-1.36"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.4-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"telegraf-1.37","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/telegraf-1.37"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37.3-r30"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"telegraf-1.38","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/telegraf-1.38"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.4-r27"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}},{"package":{"name":"trufflehog","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trufflehog"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.97.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vjxv-mx2c-9vm3.json"}}],"schema_version":"1.9.0"}