{"id":"CGA-vq76-jv6h-3f48","modified":"2026-09-07T02:04:30.147337476Z","published":"2026-01-29T00:48:19.991897Z","withdrawn":"2026-09-07T02:04:30.147337277Z","related":["CVE-2023-46737","GHSA-vfp6-jrw2-99g9","GO-2023-2181"],"affected":[{"package":{"name":"aactl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/aactl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.12-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"apko","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apko"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"cosign","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cosign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"falco","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/falco"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.37.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"falco-dev","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/falco-dev"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.37.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"falco-src","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/falco-src"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.37.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"falcoctl-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/falcoctl-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"flux-source-controller","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-source-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"flux-source-controller-2.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-source-controller-2.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"flux-source-controller-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-source-controller-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"goreleaser-1.18","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/goreleaser-1.18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"ko","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ko"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"kubescape","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubescape"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"melange","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/melange"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"melange-microvm-init","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/melange-microvm-init"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"policy-controller","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/policy-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"policy-controller-tester","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/policy-controller-tester"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"policy-controller-webhook","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/policy-controller-webhook"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"skaffold","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/skaffold"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"slsa-verifier","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/slsa-verifier"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"spire-agent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spire-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"spire-agent-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spire-agent-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"spire-oidc-discovery-provider","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spire-oidc-discovery-provider"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"spire-oidc-discovery-provider-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spire-oidc-discovery-provider-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"spire-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spire-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"spire-server-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spire-server-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"tekton-chains","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-chains"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"tkn","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tkn"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.33.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"aactl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/aactl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.12-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"apko","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apko"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"cosign","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/cosign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"falco","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/falco"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.37.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"falco-dev","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/falco-dev"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.37.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"falco-src","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/falco-src"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.37.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"flux-source-controller","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/flux-source-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"flux-source-controller-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/flux-source-controller-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"goreleaser-1.18","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/goreleaser-1.18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"ko","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ko"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"kubescape","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubescape"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"melange","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/melange"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"melange-microvm-init","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/melange-microvm-init"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"policy-controller","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/policy-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"policy-controller-tester","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/policy-controller-tester"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"policy-controller-webhook","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/policy-controller-webhook"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"skaffold","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/skaffold"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"slsa-verifier","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/slsa-verifier"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"spire-agent","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/spire-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"spire-oidc-discovery-provider","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/spire-oidc-discovery-provider"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"spire-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/spire-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"tekton-chains","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-chains"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}},{"package":{"name":"tkn","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tkn"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.33.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vq76-jv6h-3f48.json"}}],"schema_version":"1.7.3"}