{"id":"CGA-xhph-hj6q-jqvx","modified":"2026-09-07T02:04:42.356527721Z","published":"2026-06-19T00:31:39Z","withdrawn":"2026-09-07T02:04:42.356527456Z","related":["CVE-2026-54285","GHSA-8988-4f7v-96qf"],"affected":[{"package":{"name":"cadence-web","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cadence-web"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.15-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"gemini-cli","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gemini-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-8.17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r28"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-8.17-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.17-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r28"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-8.17-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.17-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r28"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-8.19","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.19"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.17-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-8.19-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.19-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.17-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-8.19-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.19-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.17-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-9.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r32"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-9.0-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.0-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r32"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-9.0-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.0-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r32"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-9.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.10-r24"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-9.1-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.1-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.10-r24"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-9.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r18"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-9.2-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.2-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r18"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-9.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.6-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-9.3-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.3-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.6-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-9.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"kibana-9.4-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.4-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"langfuse-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.195.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"langfuse-3-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.197.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"langfuse-fips-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.195.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"langfuse-fips-3-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.197.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"librechat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/librechat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"opensearch-dashboards-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"opensearch-dashboards-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"opensearch-dashboards-3-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.252.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"renovate","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/renovate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.231.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"langfuse-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/langfuse-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.195.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"langfuse-3-worker","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/langfuse-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.197.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"opensearch-dashboards-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.252.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}},{"package":{"name":"renovate","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/renovate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.231.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhph-hj6q-jqvx.json"}}],"schema_version":"1.9.0"}