{"id":"CGA-xhpq-xjpc-gfgp","modified":"2026-09-07T02:04:42.405271687Z","published":"2026-01-29T00:48:53.599289Z","withdrawn":"2026-09-07T02:04:42.405271465Z","related":["CVE-2024-52304","GHSA-8495-4g3g-x7pr"],"affected":[{"package":{"name":"airflow","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"airflow-bitnami-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-bitnami-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"awx","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/awx"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.6.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"checkov","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/checkov"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.432-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"dask-gateway","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dask-gateway"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2024.1.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"dask-gateway-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dask-gateway-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2024.1.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-agent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-agent-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-agent-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-manager","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-manager"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-manager-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-manager-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-qpext","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-qpext"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-qpext-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-qpext-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-router","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-router"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-router-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-router-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-storage-controller","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-storage-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"py3-aiohttp","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-aiohttp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.11-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"py3-cassandra-medusa","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-cassandra-medusa"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"py3-cassandra-medusa-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-cassandra-medusa-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"py3.10-vllm-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-vllm-cuda-11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.5-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"py3.10-wheels-vllm-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-wheels-vllm-cuda-11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.5-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"py3.13-scanner-test-libraries-aiohttp","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-scanner-test-libraries-aiohttp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"request-1276","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/request-1276"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"request-1276-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/request-1276-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"airflow","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/airflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"airflow-bitnami-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/airflow-bitnami-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"checkov","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/checkov"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.432-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"dask-gateway","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/dask-gateway"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2024.1.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"dask-gateway-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/dask-gateway-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2024.1.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-agent","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-agent-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-agent-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-manager","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-manager"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-manager-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-manager-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-qpext","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-qpext"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-qpext-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-qpext-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-router","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-router"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-router-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-router-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"kserve-storage-controller","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-storage-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"py3-aiohttp","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-aiohttp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.11-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"py3-cassandra-medusa","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-cassandra-medusa"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}},{"package":{"name":"py3-cassandra-medusa-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-cassandra-medusa-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xhpq-xjpc-gfgp.json"}}],"schema_version":"1.7.5"}