{"schema_version":"1.9.0","id":"CGA-5r6m-hcwc-jvhp","published":"2026-04-07T03:30:21.791203Z","modified":"2026-09-07T02:03:22.843684364Z","withdrawn":"2026-09-07T02:03:22.843684114Z","related":["CVE-2026-35172","GHSA-f2g3-hh2r-cwgc"],"affected":[{"package":{"name":"argocd-image-updater","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argocd-image-updater"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}},{"package":{"name":"argocd-image-updater-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argocd-image-updater-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}},{"package":{"name":"envoy-gateway-egctl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/envoy-gateway-egctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}},{"package":{"name":"envoy-gateway-fips-egctl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/envoy-gateway-fips-egctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}},{"package":{"name":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.6-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.6-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}},{"package":{"name":"gitness","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitness"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}},{"package":{"name":"kots","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kots"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.130.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}},{"package":{"name":"portieris","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/portieris"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.38-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}},{"package":{"name":"portieris-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/portieris-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.38-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}},{"package":{"name":"zot","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.15-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}},{"package":{"name":"argocd-image-updater","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argocd-image-updater"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}},{"package":{"name":"envoy-gateway-egctl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/envoy-gateway-egctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}},{"package":{"name":"gitness","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitness"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}},{"package":{"name":"kots","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kots"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.130.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}},{"package":{"name":"portieris","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/portieris"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.38-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}},{"package":{"name":"zot","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.15-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5r6m-hcwc-jvhp.json"}}]}