{"schema_version":"1.7.5","id":"CGA-c22x-xxmg-cxmj","published":"2026-05-06T20:32:32.066643Z","modified":"2026-09-07T02:03:45.472856923Z","withdrawn":"2026-09-07T02:03:45.472856745Z","related":["CVE-2026-42198","GHSA-98qh-xjc8-98pq"],"affected":[{"package":{"name":"apache-hop","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-hop"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"apache-hop-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-hop-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"apicurio-registry","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apicurio-registry"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"camunda-8.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-8.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8.24-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"camunda-8.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-8.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"camunda-zeebe-8.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.6.39-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"camunda-zeebe-8.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7.29-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"camunda-zeebe-8.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8.24-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"camunda-zeebe-8.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"debezium-3.3-connector-jdbc","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/debezium-3.3-connector-jdbc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"debezium-3.3-connector-postgres","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/debezium-3.3-connector-postgres"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"debezium-3.4-connector-jdbc","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/debezium-3.4-connector-jdbc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"debezium-3.4-connector-postgres","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/debezium-3.4-connector-postgres"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"debezium-3.5-connector-jdbc","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/debezium-3.5-connector-jdbc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"debezium-3.5-connector-postgres","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/debezium-3.5-connector-postgres"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"dependency-track","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dependency-track"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"dependency-track-apiserver","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dependency-track-apiserver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"dependency-track-bundled","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dependency-track-bundled"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"druid","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"37.0.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"flyway","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flyway"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"flyway-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flyway-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"geoserver-2.27","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/geoserver-2.27"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.5-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"geoserver-2.27-community","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/geoserver-2.27-community"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.5-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"geoserver-2.28","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/geoserver-2.28"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.3-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"geoserver-2.28-community","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/geoserver-2.28-community"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.3-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"ghidra","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ghidra"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"guacamole-client-jdbc","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/guacamole-client-jdbc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"hono-service-device-registry-jdbc","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/hono-service-device-registry-jdbc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"kayenta-2025.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kayenta-2025.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.4.3-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"kayenta-2026.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kayenta-2026.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.0.2-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"kayenta-2026.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kayenta-2026.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.1.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"kayenta-fips-2025.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kayenta-fips-2025.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.4.3-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"kayenta-fips-2026.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kayenta-fips-2026.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.0.2-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"kayenta-fips-2026.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kayenta-fips-2026.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.1.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"keycloak-26.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-26.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.6.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"keycloak-26.6-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-26.6-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.6.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"keycloak-fips-26.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-fips-26.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.5.7-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"keycloak-fips-26.5-iamguarded-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-fips-26.5-iamguarded-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.5.7-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"keycloak-fips-26.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-fips-26.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.6.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"keycloak-fips-26.6-iamguarded-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-fips-26.6-iamguarded-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.6.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"nacos","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nacos"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"nacos-docker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nacos-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"nuxeo-2023","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nuxeo-2023"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.40-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"seata-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/seata-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"sonarqube","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sonarqube"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.4.0.121862-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"thingsboard-tb-node","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard-tb-node"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"apicurio-registry","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apicurio-registry"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"debezium-3.4-connector-jdbc","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/debezium-3.4-connector-jdbc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"debezium-3.4-connector-postgres","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/debezium-3.4-connector-postgres"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"debezium-3.5-connector-jdbc","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/debezium-3.5-connector-jdbc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"debezium-3.5-connector-postgres","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/debezium-3.5-connector-postgres"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"dependency-track","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/dependency-track"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"dependency-track-bundled","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/dependency-track-bundled"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"druid","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"37.0.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"flyway","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/flyway"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"keycloak-26.6","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/keycloak-26.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.6.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"keycloak-26.6-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/keycloak-26.6-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.6.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"sonarqube","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sonarqube"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.4.0.121862-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}},{"package":{"name":"thingsboard-tb-node","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/thingsboard-tb-node"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-c22x-xxmg-cxmj.json"}}]}