{"schema_version":"1.7.5","id":"CGA-6h4p-9v6j-g26c","published":"2026-01-14T21:37:54.281568Z","modified":"2026-09-07T02:03:26.351675012Z","withdrawn":"2026-09-07T02:03:26.351674825Z","related":["CVE-2026-22772","GHSA-59jp-pj84-45mr","GO-2026-4311"],"affected":[{"package":{"name":"aactl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/aactl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.12-r41"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"chainctl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/chainctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.197-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"cosign","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cosign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"falco-no-driver","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/falco-no-driver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"falcoctl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/falcoctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"falcoctl-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/falcoctl-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"flux-source-controller-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-source-controller-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"gitsign","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitsign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"gitsign-credential-cache","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitsign-credential-cache"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"image-factory","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/image-factory"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kots","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kots"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.129.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kubescape","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubescape"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.48-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-1.15","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r23"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-background-controller-1.15","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-background-controller-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r23"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-background-controller-fips-1.15","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-background-controller-fips-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.20-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-cleanup-controller-1.15","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-cleanup-controller-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r23"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-cleanup-controller-fips-1.15","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-cleanup-controller-fips-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.20-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-cli-1.15","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-cli-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r23"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-cli-fips-1.15","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-cli-fips-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.20-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-fips-1.15","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-fips-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.20-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-init-container-1.15","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-init-container-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r23"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-init-container-fips-1.15","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-init-container-fips-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.20-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-policy-reporter-plugins-kyverno-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-policy-reporter-plugins-kyverno-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-reports-controller-1.15","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-reports-controller-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r23"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-reports-controller-fips-1.15","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-reports-controller-fips-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.20-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"podman-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/podman-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"sigstore-scaffolding-ctlog-createctconfig","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-ctlog-createctconfig"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.31-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"sigstore-scaffolding-ctlog-managectroots","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-ctlog-managectroots"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.31-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"sigstore-scaffolding-ctlog-verifyfulcio","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-ctlog-verifyfulcio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.31-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"sigstore-scaffolding-fips-ctlog-createctconfig","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-ctlog-createctconfig"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.31-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"sigstore-scaffolding-fips-ctlog-managectroots","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-ctlog-managectroots"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.31-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"sigstore-scaffolding-fips-ctlog-verifyfulcio","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-ctlog-verifyfulcio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.31-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"skopeo","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/skopeo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"slsa-verifier","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/slsa-verifier"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"tekton-chains","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-chains"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"vexctl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vexctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"witness","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/witness"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"zarf","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zarf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.70.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"aactl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/aactl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.12-r41"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"cosign","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/cosign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"falco-no-driver","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/falco-no-driver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"falcoctl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/falcoctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"gitsign","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitsign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"gitsign-credential-cache","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitsign-credential-cache"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kots","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kots"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.129.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kubescape","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubescape"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.48-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-1.15","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kyverno-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r23"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-background-controller-1.15","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kyverno-background-controller-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r23"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-cleanup-controller-1.15","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kyverno-cleanup-controller-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r23"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-cli-1.15","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kyverno-cli-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r23"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-init-container-1.15","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kyverno-init-container-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r23"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"kyverno-reports-controller-1.15","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kyverno-reports-controller-1.15"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.3-r23"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"sigstore-scaffolding-ctlog-createctconfig","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-ctlog-createctconfig"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.31-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"sigstore-scaffolding-ctlog-managectroots","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-ctlog-managectroots"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.31-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"sigstore-scaffolding-ctlog-verifyfulcio","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-ctlog-verifyfulcio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.31-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"skopeo","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/skopeo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"slsa-verifier","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/slsa-verifier"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"tekton-chains","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-chains"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"vexctl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vexctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"witness","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/witness"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}},{"package":{"name":"zarf","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zarf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.70.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6h4p-9v6j-g26c.json"}}]}