{"schema_version":"1.9.0","id":"CGA-8j86-34gg-44ch","published":"2026-03-31T07:15:14.490234Z","modified":"2026-09-07T02:03:37.469552340Z","withdrawn":"2026-09-07T02:03:37.469552140Z","related":["CVE-2026-4867","GHSA-37ch-88jc-xwx2"],"affected":[{"package":{"name":"arangodb-3.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/arangodb-3.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.14.4-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"arangodb-3.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/arangodb-3.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.9.4-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"argo-workflows-ui-3.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflows-ui-3.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.19-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"argo-workflows-ui-3.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflows-ui-3.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.12-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"argo-workflows-ui-4.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-workflows-ui-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.1.6-r26"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"gitlab-rails-ce-19.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.3.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.3.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"json-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/json-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.4-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-earlystopping","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-earlystopping"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-suggestion-hyperband","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-hyperband"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-suggestion-hyperopt","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-hyperopt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-suggestion-nas-darts","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-nas-darts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-suggestion-nas-enas","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-nas-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-suggestion-optuna-enas","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-optuna-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-suggestion-pbt-enas","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-pbt-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-suggestion-skopt-enas","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-suggestion-skopt-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-tfevent-metricscollector","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/katib-tfevent-metricscollector"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"kubeflow-centraldashboard","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-centraldashboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-r18"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"kubeflow-pipelines-frontend","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-pipelines-frontend"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"kubescape-grype-offline-db","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubescape-grype-offline-db"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0_git20250804-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"langfuse-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r17"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"langfuse-2-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-2-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r17"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"langfuse-fips-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"langfuse-fips-2-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-2-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"pelias-api","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pelias-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.6.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"py3.10-captum","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-captum"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"py3.11-captum","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-captum"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"py3.12-captum","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-captum"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"py3.13-captum","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-captum"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"sqlpad","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sqlpad"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.7-r17"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"thingsboard-tb-js-executor-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard-tb-js-executor-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"thingsboard-tb-web-ui-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard-tb-web-ui-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"wazuh-dashboard-security-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.6-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"wazuh-dashboard-security-plugin-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.6-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"argo-workflows-ui-3.7","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-workflows-ui-3.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.12-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"argo-workflows-ui-4.0","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-workflows-ui-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"json-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/json-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.4-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-earlystopping","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-earlystopping"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-suggestion-hyperband","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-hyperband"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-suggestion-hyperopt","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-hyperopt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-suggestion-nas-darts","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-nas-darts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-suggestion-nas-enas","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-nas-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-suggestion-optuna-enas","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-optuna-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-suggestion-pbt-enas","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-pbt-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-suggestion-skopt-enas","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-suggestion-skopt-enas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"katib-tfevent-metricscollector","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/katib-tfevent-metricscollector"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"kubeflow-centraldashboard","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-centraldashboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-r18"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"kubeflow-pipelines-frontend","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-pipelines-frontend"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}},{"package":{"name":"sqlpad","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sqlpad"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.7-r17"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8j86-34gg-44ch.json"}}]}