{"schema_version":"1.7.5","id":"CGA-chc5-4fq5-g9w5","published":"2026-01-29T00:46:02.927161Z","modified":"2026-09-07T02:03:47.567756220Z","withdrawn":"2026-09-07T02:03:47.567756015Z","related":["CVE-2025-21502","GHSA-46mv-5cpj-wjxv"],"affected":[{"package":{"name":"corretto-17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/corretto-17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.14.7.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"corretto-21","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/corretto-21"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.6.7.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.26-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-11-bcfips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-11-bcfips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.26-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-11-openj9-default-policy","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-11-openj9-default-policy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.53.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-13-demos","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-13-demos"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.14.5-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-14-jre","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-14-jre"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.0.2.12-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-15-doc","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-15-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.10.5-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-16-jmods","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-16-jmods"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.0.2.7-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.14-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-17-openj9-default-policy","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-17-openj9-default-policy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.53.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-18","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.0.2.1.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-19-jre-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-19-jre-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2.7-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-20-jre","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-20-jre"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.0.2.9-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-21","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-21"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.6-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-21-openj9-default-policy","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-21-openj9-default-policy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.48.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-22-dbg","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-22-dbg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.2-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-23","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-25-openj9-default-jvm","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-25-openj9-default-jvm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.59.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-25-openj9-jmods","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-25-openj9-jmods"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.59.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-26-openj9-jre","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-26-openj9-jre"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.59.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-8-openj9-dbg","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-8-openj9-dbg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.53.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.4-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-crac-17-jre","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-crac-17-jre"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.14.7-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-crac-21-jre","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-crac-21-jre"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.6.7-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-11","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/openjdk-11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.26-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-13-demos","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/openjdk-13-demos"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.14.5-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-14-jre","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/openjdk-14-jre"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.0.2.12-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-15-doc","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/openjdk-15-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.10.5-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-16-jmods","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/openjdk-16-jmods"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.0.2.7-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-17","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/openjdk-17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.14-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-18","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/openjdk-18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.0.2.1.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-19-jre-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/openjdk-19-jre-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2.7-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-20-jre","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/openjdk-20-jre"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.0.2.9-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-21","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/openjdk-21"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.6-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-22-dbg","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/openjdk-22-dbg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.2-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-23","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/openjdk-23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}},{"package":{"name":"openjdk-9","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/openjdk-9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.4-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-chc5-4fq5-g9w5.json"}}]}