{"id":"CGA-xj7x-xvpg-rmrf","modified":"2026-09-07T02:04:42.688465260Z","published":"2026-07-24T06:41:12Z","withdrawn":"2026-09-07T02:04:42.688465101Z","related":["CVE-2026-10051","GHSA-f4v5-65jj-pcr2"],"affected":[{"package":{"name":"akhq","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/akhq"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.1-r16"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"apache-hop","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-hop"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.1-r16"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"apache-hop-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-hop-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.1-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"apache-jena-fuseki","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-jena-fuseki"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"confluent-kafka","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/confluent-kafka"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0.397-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"confluent-kafka-jre-bcfips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/confluent-kafka-jre-bcfips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0.382-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"dependency-track","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dependency-track"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"dependency-track-bundled","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dependency-track-bundled"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"druid","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"37.0.0-r47"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"jenkins-2.568","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jenkins-2.568"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.568.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"jenkins-2.568-openjdk-21","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jenkins-2.568-openjdk-21"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.568.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"jenkins-2.568-openjdk-25","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jenkins-2.568-openjdk-25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.568.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"kafka-4.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"kafka-fips-4.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-fips-4.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"neo4j-2026.03","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/neo4j-2026.03"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.03.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"neo4j-2026.06","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/neo4j-2026.06"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.06.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"neo4j-5.26","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/neo4j-5.26"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.28-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"reposilite","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/reposilite"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"solr-10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/solr-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"solr-10-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/solr-10-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"solr-fips-10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/solr-fips-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"solr-fips-10-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/solr-fips-10-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"spark-4.2-scala-2.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-4.2-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"spark-fips-4.2-scala-2.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-fips-4.2-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"spark-kubernetes-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-kubernetes-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"spark-kubernetes-operator-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-kubernetes-operator-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-cluster-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-cluster-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-fips-cluster-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-cluster-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-fips-kafka-agent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-kafka-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-fips-kafka-init","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-kafka-init"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-fips-topic-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-topic-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-fips-tracing-agent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-tracing-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-fips-user-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-user-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-agent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-init","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-init"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-topic-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-topic-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-tracing-agent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-tracing-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-user-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-user-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"traccar","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/traccar"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14.5-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"traccar-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/traccar-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14.5-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"akhq","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/akhq"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.1-r16"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"confluent-kafka","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/confluent-kafka"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0.397-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"dependency-track","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/dependency-track"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"dependency-track-bundled","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/dependency-track-bundled"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"druid","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"37.0.0-r47"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"neo4j-2026.06","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/neo4j-2026.06"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.06.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"solr-10","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/solr-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"solr-10-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/solr-10-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-cluster-operator","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-cluster-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-agent","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-init","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-init"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-topic-operator","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-topic-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-tracing-agent","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-tracing-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}},{"package":{"name":"strimzi-kafka-operator-user-operator","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-user-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xj7x-xvpg-rmrf.json"}}],"schema_version":"1.9.0"}