{"schema_version":"1.7.3","id":"CGA-f7j6-fx44-jgpm","published":"2026-01-29T00:46:38.779273Z","modified":"2026-09-07T02:03:50.162422703Z","withdrawn":"2026-09-07T02:03:50.162422447Z","related":["CVE-2025-46327","GHSA-6jgm-j7h2-2fqg","GO-2025-3650"],"affected":[{"package":{"name":"grafana-alloy","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/grafana-alloy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"grafana-alloy-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/grafana-alloy-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"grafana-alloy-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/grafana-alloy-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"opentelemetry-collector-contrib","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentelemetry-collector-contrib"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.125.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"opentelemetry-collector-contrib-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentelemetry-collector-contrib-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.125.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"opentelemetry-collector-contrib-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opentelemetry-collector-contrib-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.125.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"splunk-otel-collector","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/splunk-otel-collector"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.124.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"splunk-otel-collector-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/splunk-otel-collector-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.124.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"splunk-otel-collector-doc","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/splunk-otel-collector-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.124.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"splunk-otel-collector-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/splunk-otel-collector-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.124.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"splunk-otel-collector-migratecheckpoint","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/splunk-otel-collector-migratecheckpoint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.124.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"splunk-otel-collector-migratecheckpoint-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/splunk-otel-collector-migratecheckpoint-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.124.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"sql_exporter","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sql_exporter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.1-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"sql_exporter-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sql_exporter-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.1-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"sql_exporter-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sql_exporter-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"telegraf-1.33","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/telegraf-1.33"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.3-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"telegraf-1.34","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/telegraf-1.34"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"vault-1.16","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-1.16"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"vault-1.16-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-1.16-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"vault-1.17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-1.17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.6-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"vault-1.17-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-1.17-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.6-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"vault-1.18","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-1.18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.5-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"vault-1.18-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-1.18-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.5-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"vault-1.19","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-1.19"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"vault-1.19-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-1.19-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"vault-fips-1.18","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-fips-1.18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.5-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"vault-fips-1.18-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-fips-1.18-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.5-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"vault-fips-1.19","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-fips-1.19"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"vault-fips-1.19-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vault-fips-1.19-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"grafana-alloy","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/grafana-alloy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"grafana-alloy-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/grafana-alloy-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"opentelemetry-collector-contrib","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentelemetry-collector-contrib"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.125.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"opentelemetry-collector-contrib-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opentelemetry-collector-contrib-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.125.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"splunk-otel-collector","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/splunk-otel-collector"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.124.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"splunk-otel-collector-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/splunk-otel-collector-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.124.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"splunk-otel-collector-doc","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/splunk-otel-collector-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.124.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"splunk-otel-collector-migratecheckpoint","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/splunk-otel-collector-migratecheckpoint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.124.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"splunk-otel-collector-migratecheckpoint-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/splunk-otel-collector-migratecheckpoint-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.124.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"sql_exporter","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sql_exporter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.1-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"sql_exporter-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sql_exporter-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.1-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"telegraf-1.33","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/telegraf-1.33"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.3-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}},{"package":{"name":"telegraf-1.34","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/telegraf-1.34"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f7j6-fx44-jgpm.json"}}]}