{"schema_version":"1.7.3","id":"CGA-2j5x-vcjc-9f8r","published":"2026-01-29T00:41:00.789965Z","modified":"2026-09-07T02:02:08.928373757Z","withdrawn":"2026-09-07T02:02:08.928373613Z","related":["CVE-2025-62820","GHSA-x6fh-7qmf-69xh","GO-2025-4068"],"affected":[{"package":{"name":"caddy","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/caddy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"caddy-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/caddy-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"caddy-man","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/caddy-man"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"caddy-src","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/caddy-src"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"step","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/step"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.28.7-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"step-ca","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/step-ca"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.28.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"step-ca-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/step-ca-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.28.4-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"step-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/step-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.28.7-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"step-issuer","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/step-issuer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"step-issuer-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/step-issuer-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"step-issuer-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/step-issuer-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"step-issuer-fips-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/step-issuer-fips-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"caddy","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/caddy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"caddy-man","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/caddy-man"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"caddy-src","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/caddy-src"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"step","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/step"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.28.7-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"step-ca","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/step-ca"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.28.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"step-issuer","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/step-issuer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}},{"package":{"name":"step-issuer-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/step-issuer-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2j5x-vcjc-9f8r.json"}}]}