{"schema_version":"1.9.0","id":"CGA-5h6w-88ff-g48p","published":"2026-08-01T20:29:07Z","modified":"2026-09-07T02:03:21.788115262Z","withdrawn":"2026-09-07T02:03:21.788115135Z","related":["CVE-2026-59884","GHSA-m4p7-r5rc-7g4j"],"affected":[{"package":{"name":"airflow-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"apache-beam-python-3.12-sdk","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-beam-python-3.12-sdk"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.75.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"authentik-2026.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/authentik-2026.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.2.6-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"authentik-fips-2026.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/authentik-fips-2026.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.2.6-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"authentik-fips-2026.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/authentik-fips-2026.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.5.6-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"datahub-ingestion","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/datahub-ingestion"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"dbt-bigquery","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dbt-bigquery"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"duplicity","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/duplicity"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"kserve-storage-controller","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-storage-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"kubeflow-pipelines-apiserver","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"lmcache-cuda-12.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/lmcache-cuda-12.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"localstack","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/localstack"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"mlflow","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"openstack-keystone-2025.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openstack-keystone-2025.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.0.1_git20260618-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"openstack-keystone-2025.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openstack-keystone-2025.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1_git20260618-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"openstack-keystone-2026.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openstack-keystone-2026.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"29.0.1_git20260616-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"py3-cassandra-medusa","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-cassandra-medusa"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"superset-6.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/superset-6.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"wazuh-manager-framework","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-manager-framework"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.6-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"wazuh-manager-framework-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-manager-framework-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.7-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"airflow-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"kserve-storage-controller","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-storage-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"kubeflow-pipelines-apiserver","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-pipelines-apiserver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"mlflow","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"py3-cassandra-medusa","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-cassandra-medusa"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}},{"package":{"name":"superset-6.0","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/superset-6.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5h6w-88ff-g48p.json"}}]}