{"id":"CGA-wmjr-c4px-mfvg","modified":"2026-09-07T02:04:39.056838934Z","published":"2026-01-29T00:50:26.168683Z","withdrawn":"2026-09-07T02:04:39.056838823Z","related":["CVE-2025-29907","GHSA-w532-jxjh-hjhj"],"affected":[{"package":{"name":"opensearch-dashboards-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-alerting-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-alerting-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-anomaly-detection-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-maps","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-maps"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-notifications","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-observability","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-observability"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-query-workbench","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-query-workbench"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-search-relevance","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-search-relevance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-visualizations","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-visualizations"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-alerting-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-fips-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-maps","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-maps"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-notifications","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-observability","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-observability"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-query-workbench","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-query-workbench"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-search-relevance","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-search-relevance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-visualizations","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-visualizations"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-index-management-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-fips-ml-commons-dashboards","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-ml-commons-dashboards"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-analytics-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-fips-security-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-index-management-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-index-management-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-ml-commons-dashboards","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-ml-commons-dashboards"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-security-analytics-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-security-analytics-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-security-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-security-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-alerting-dashboards-plugin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2-alerting-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-anomaly-detection-dashboards-plugin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2-anomaly-detection-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-config","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-maps","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2-dashboards-maps"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-notifications","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2-dashboards-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-observability","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2-dashboards-observability"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-query-workbench","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2-dashboards-query-workbench"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-reporting","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-search-relevance","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2-dashboards-search-relevance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-visualizations","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2-dashboards-visualizations"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-index-management-dashboards-plugin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2-index-management-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-ml-commons-dashboards","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2-ml-commons-dashboards"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-security-analytics-dashboards-plugin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2-security-analytics-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}},{"package":{"name":"opensearch-dashboards-2-security-dashboards-plugin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-2-security-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-wmjr-c4px-mfvg.json"}}],"schema_version":"1.7.3"}