{"schema_version":"1.9.0","id":"CGA-8hvf-38pw-fqj9","published":"2026-01-29T00:45:07.279502Z","modified":"2026-09-07T02:03:36.922232214Z","withdrawn":"2026-09-07T02:03:36.922232003Z","related":["CVE-2024-4068","GHSA-grv7-fg5c-xmjg"],"affected":[{"package":{"name":"arangodb-3.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/arangodb-3.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14.4-r17"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"argo-workflows","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflows"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"argo-workflows-ui-3.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflows-ui-3.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.13-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"gitlab-rails-ce-19.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.3.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.3.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"kibana-7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.23-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"kubeflow-pipelines-frontend","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-pipelines-frontend"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"lerna","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/lerna"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.4-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-alerting-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-alerting-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-anomaly-detection-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-maps","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-maps"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-notifications","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-observability","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-observability"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-query-workbench","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-query-workbench"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-search-relevance","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-search-relevance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-dashboards-visualizations","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-visualizations"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-alerting-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-fips-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-maps","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-maps"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-notifications","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-observability","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-observability"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-query-workbench","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-query-workbench"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-search-relevance","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-search-relevance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-fips-dashboards-visualizations","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-visualizations"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-index-management-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-fips-ml-commons-dashboards","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-ml-commons-dashboards"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-analytics-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-fips-security-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-index-management-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-index-management-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-ml-commons-dashboards","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-ml-commons-dashboards"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-security-analytics-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-security-analytics-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"opensearch-dashboards-2-security-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-security-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"py3.10-captum","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-captum"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"py3.11-captum","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-captum"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"py3.12-captum","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-captum"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"py3.13-captum","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-captum"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"argo-workflows","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-workflows"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"argo-workflows-ui-3.7","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-workflows-ui-3.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.13-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"kubeflow-pipelines-frontend","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-pipelines-frontend"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}},{"package":{"name":"lerna","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/lerna"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.4-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8hvf-38pw-fqj9.json"}}]}