{"schema_version":"1.7.5","id":"CGA-3wh4-q833-xff6","published":"2026-04-11T03:15:26.920944Z","modified":"2026-09-07T02:03:12.724103082Z","withdrawn":"2026-09-07T02:03:12.724102933Z","related":["CVE-2026-35205","GHSA-q5jf-9vfq-h4h7"],"affected":[{"package":{"name":"cert-manager-cmctl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cert-manager-cmctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"cert-manager-cmctl-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cert-manager-cmctl-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"cilium-cli","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cilium-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.2-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"flux-2.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-2.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"flux-source-controller","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-source-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"flux-source-controller-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-source-controller-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"gitlab-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"gitlab-operator-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-operator-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"helm-diff","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/helm-diff"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.7-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"helm-push","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/helm-push"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.1-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"kots","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kots"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.130.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"kumactl-2.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kumactl-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.6-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"rancher-fleet-agent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-fleet-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"rancher-fleet-agent-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-fleet-agent-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"rancher-fleet-cli","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-fleet-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"rancher-fleet-cli-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-fleet-cli-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"rancher-fleet-controller","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-fleet-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"rancher-fleet-controller-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-fleet-controller-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"zarf","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zarf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.74.2-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"zarf-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zarf-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.74.2-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"cert-manager-cmctl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/cert-manager-cmctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"cilium-cli","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/cilium-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.2-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"flux-2.8","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/flux-2.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"flux-source-controller","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/flux-source-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"helm-push","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/helm-push"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.1-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"kots","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kots"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.130.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"kumactl-2.13","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kumactl-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.6-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"rancher-fleet-agent","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rancher-fleet-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"rancher-fleet-cli","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rancher-fleet-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"rancher-fleet-controller","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rancher-fleet-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}},{"package":{"name":"zarf","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zarf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.74.2-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3wh4-q833-xff6.json"}}]}