{"id":"CGA-xv7c-4xg5-php2","modified":"2026-09-07T01:57:02.445716773Z","published":"2026-01-08T11:35:01Z","upstream":["CVE-2026-21441","GHSA-38jv-5279-wg99"],"references":[{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2026/01/msg00017.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/21xxx/CVE-2026-21441.json"},{"type":"ADVISORY","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21441"},{"type":"FIX","url":"https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21441.json"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:0981"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:0990"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:10184"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1038"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1041"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1042"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1086"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1087"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1088"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1089"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1166"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1168"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1176"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1224"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1226"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1239"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1240"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1241"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1254"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1485"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:14877"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1504"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1546"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1596"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1599"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1609"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1618"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1619"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1652"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1674"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1676"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1693"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1704"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1706"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1712"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1717"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1726"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1729"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1730"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1734"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1735"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1736"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17456"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17457"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17460"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17461"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17462"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:17463"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1791"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1792"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1793"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1794"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1803"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1805"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1942"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:1957"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:19712"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2106"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2126"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2137"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2139"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2144"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2256"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2456"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2500"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:25127"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2563"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2681"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2695"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2717"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2718"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2723"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2728"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2760"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2762"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2764"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2765"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:28043"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:28441"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2900"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2911"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2919"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2924"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2925"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:2926"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:3296"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:33154"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:3406"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:3444"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:3461"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:3462"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:3713"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:3782"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:3869"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:3874"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:3884"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:3960"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:4185"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:4215"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:4271"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:4466"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:4467"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:5459"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:6287"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:6292"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:8151"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:8500"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:8501"},{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2026-21441"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2427726"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:41928"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:44696"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:51357"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:61628"}],"affected":[{"package":{"name":"authentik","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/authentik?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.10.3-r4"}]}],"ecosystem_specific":{"components":[{"component_location":"/usr/share/authentik/venv/lib/python3.13/site-packages/urllib3-2.6.0.dist-info/METADATA","component_purl":"pkg:pypi/urllib3@2.6.0","latest_event_status":"fixed","latest_event_timestamp":"2026-01-14T17:55:12Z","component_name":"urllib3","component_version":"2.6.0","component_type":"python"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xv7c-4xg5-php2.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}]}