{"schema_version":"1.9.0","id":"CGA-7rc4-cr5c-mxf4","published":"2026-06-16T23:30:39Z","modified":"2026-09-07T02:03:34.190597658Z","withdrawn":"2026-09-07T02:03:34.190597522Z","related":["CVE-2026-54275","GHSA-4m7w-qmgq-4wj5"],"affected":[{"package":{"name":"airflow-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"airflow-core-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-core-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"apache-beam-python-3.11-sdk","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-beam-python-3.11-sdk"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"apache-beam-python-3.12-sdk","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-beam-python-3.12-sdk"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"apache-beam-python-3.13-sdk","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-beam-python-3.13-sdk"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"authentik-2025.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/authentik-2025.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.12.6-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"authentik-2026.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/authentik-2026.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.2.4-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"authentik-fips-2025.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/authentik-fips-2025.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.12.6-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"authentik-fips-2026.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/authentik-fips-2026.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.2.4-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"awx","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/awx"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.6.1-r42"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"dask-kubernetes-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dask-kubernetes-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.3.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"lmcache-cuda-12.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/lmcache-cuda-12.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"metaflow-service-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/metaflow-service-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"mlflow","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"mlflow-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"open-webui","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/open-webui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"py3.10-vllm-cuda-12.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-vllm-cuda-12.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"py3.10-vllm-cuda-12.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-vllm-cuda-12.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"py3.10-vllm-cuda-13.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-vllm-cuda-13.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"py3.12-vllm-cuda-12.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-vllm-cuda-12.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"py3.12-vllm-cuda-12.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-vllm-cuda-12.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"py3.12-vllm-cuda-13.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-vllm-cuda-13.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"py3.13-scanner-test-libraries-aiohttp","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-scanner-test-libraries-aiohttp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"py3.13-vllm-cuda-12.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-vllm-cuda-12.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"py3.13-vllm-cuda-13.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-vllm-cuda-13.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"request-1276","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/request-1276"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"text-generation-inference","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/text-generation-inference"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-r16"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"tritonserver-backend-vllm-cuda-12.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tritonserver-backend-vllm-cuda-12.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.9.0_git20260617-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"tritonserver-backend-vllm-cuda-13.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tritonserver-backend-vllm-cuda-13.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.11-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"airflow-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"mlflow","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}},{"package":{"name":"open-webui","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/open-webui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7rc4-cr5c-mxf4.json"}}]}