{"schema_version":"1.7.5","id":"CGA-37p5-x5vq-vqx9","published":"2026-03-13T04:15:40.757719Z","modified":"2026-09-07T02:02:44.307001013Z","withdrawn":"2026-09-07T02:02:44.307000888Z","related":["CVE-2026-28229","GHSA-56px-hm34-xqj5","GO-2026-4678"],"affected":[{"package":{"name":"argo-workflow-controller-3.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflow-controller-3.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.19-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-37p5-x5vq-vqx9.json"}},{"package":{"name":"argo-workflow-controller-fips-3.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflow-controller-fips-3.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.19-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-37p5-x5vq-vqx9.json"}},{"package":{"name":"argo-workflow-executor-3.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflow-executor-3.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.19-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-37p5-x5vq-vqx9.json"}},{"package":{"name":"argo-workflow-executor-fips-3.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflow-executor-fips-3.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.19-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-37p5-x5vq-vqx9.json"}},{"package":{"name":"argo-workflows-3.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflows-3.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.19-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-37p5-x5vq-vqx9.json"}},{"package":{"name":"argo-workflows-fips-3.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflows-fips-3.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.19-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-37p5-x5vq-vqx9.json"}},{"package":{"name":"kubeflow-pipelines-apiserver","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-37p5-x5vq-vqx9.json"}},{"package":{"name":"kubeflow-pipelines-cache_server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-pipelines-cache_server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-37p5-x5vq-vqx9.json"}},{"package":{"name":"kubeflow-pipelines-persistence_agent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-pipelines-persistence_agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-37p5-x5vq-vqx9.json"}},{"package":{"name":"kubeflow-pipelines-scheduledworkflow","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-pipelines-scheduledworkflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-37p5-x5vq-vqx9.json"}},{"package":{"name":"kubeflow-pipelines-apiserver","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-pipelines-apiserver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-37p5-x5vq-vqx9.json"}},{"package":{"name":"kubeflow-pipelines-cache_server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-pipelines-cache_server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-37p5-x5vq-vqx9.json"}},{"package":{"name":"kubeflow-pipelines-persistence_agent","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-pipelines-persistence_agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-37p5-x5vq-vqx9.json"}},{"package":{"name":"kubeflow-pipelines-scheduledworkflow","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-pipelines-scheduledworkflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-37p5-x5vq-vqx9.json"}}]}