{"schema_version":"1.7.3","id":"CGA-ghfj-54hg-3xgm","published":"2026-01-29T00:46:58.230363Z","modified":"2026-09-07T02:03:56.940831284Z","withdrawn":"2026-09-07T02:03:56.940831075Z","related":["CVE-2023-49569","GHSA-449p-3h89-pw88","GO-2024-2456"],"affected":[{"package":{"name":"bom","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/bom"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"flux-2.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-2.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"gitness","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitness"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0_beta5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"gitsign","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitsign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"gitsign-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitsign-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"gitsign-credential-cache","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitsign-credential-cache"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"go-licenses","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/go-licenses"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"goreleaser","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/goreleaser"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"goreleaser-1.18","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/goreleaser-1.18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"grafana-9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/grafana-9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.15-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"grafana-oci-compat-9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/grafana-oci-compat-9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.15-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"nuclei","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nuclei"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"pulumi-kubernetes-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi-kubernetes-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"scorecard","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/scorecard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"src-fingerprint","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/src-fingerprint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"bom","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/bom"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"gitness","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitness"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0_beta5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"gitsign","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitsign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"gitsign-config","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitsign-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"gitsign-credential-cache","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitsign-credential-cache"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"go-licenses","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/go-licenses"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"goreleaser","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/goreleaser"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"goreleaser-1.18","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/goreleaser-1.18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"nuclei","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/nuclei"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"pulumi-kubernetes-operator","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi-kubernetes-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"scorecard","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/scorecard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}},{"package":{"name":"src-fingerprint","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/src-fingerprint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghfj-54hg-3xgm.json"}}]}