{"schema_version":"1.9.0","id":"CGA-2r69-w36g-jxvr","published":"2026-06-04T14:21:41Z","modified":"2026-09-07T02:02:20.083570312Z","withdrawn":"2026-09-07T02:02:20.083570146Z","related":["CVE-2026-34993","GHSA-jg22-mg44-37j8"],"affected":[{"package":{"name":"airflow-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"airflow-core-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-core-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"awx","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/awx"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.6.1-r38"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"checkov","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/checkov"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.533-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"dagster","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dagster"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"dagster-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dagster-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"dask-kubernetes","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dask-kubernetes"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.3.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"dask-kubernetes-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dask-kubernetes-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.3.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"datahub-ingestion","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/datahub-ingestion"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"datahub-ingestion-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/datahub-ingestion-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"gitlab-toolbox-ce-18.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-toolbox-ce-18.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.10.7-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"gitlab-toolbox-ce-18.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-toolbox-ce-18.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.4-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"gitlab-toolbox-ce-fips-18.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-toolbox-ce-fips-18.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.10.7-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"gitlab-toolbox-ce-fips-18.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-toolbox-ce-fips-18.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.4-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"katib-earlystopping","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-earlystopping"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r18"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"keep-api","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keep-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.53.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"keep-api-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keep-api-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.52.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"litellm","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/litellm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.87.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"lmcache-cuda-12.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/lmcache-cuda-12.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"nemo","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nemo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.3-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"opal","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"open-webui","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/open-webui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"py3.10-vllm-cuda-12.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-vllm-cuda-12.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"py3.10-vllm-cuda-12.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-vllm-cuda-12.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"py3.10-vllm-cuda-13.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-vllm-cuda-13.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"py3.12-vllm-cuda-12.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-vllm-cuda-12.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"py3.12-vllm-cuda-12.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-vllm-cuda-12.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"py3.12-vllm-cuda-13.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-vllm-cuda-13.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"py3.13-scanner-test-libraries-aiohttp","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-scanner-test-libraries-aiohttp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"py3.13-vllm-cuda-12.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-vllm-cuda-12.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"py3.13-vllm-cuda-13.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-vllm-cuda-13.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"request-1276","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/request-1276"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"text-generation-inference","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/text-generation-inference"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"tritonserver-backend-vllm-cuda-12.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tritonserver-backend-vllm-cuda-12.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.9.0_git20260617-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"tritonserver-backend-vllm-cuda-13.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tritonserver-backend-vllm-cuda-13.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.11-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"vllm-cuda-13.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vllm-cuda-13.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"airflow-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"checkov","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/checkov"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.533-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"dask-kubernetes","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/dask-kubernetes"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.3.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"katib-earlystopping","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-earlystopping"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r18"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}},{"package":{"name":"open-webui","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/open-webui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2r69-w36g-jxvr.json"}}]}