{"schema_version":"1.7.5","id":"CGA-h9mq-3c7r-hw5h","published":"2026-02-05T14:30:31.771517Z","modified":"2026-09-07T02:04:00.841841479Z","withdrawn":"2026-09-07T02:04:00.841841327Z","related":["CVE-2026-25547","GHSA-7h2j-956f-4vf2"],"affected":[{"package":{"name":"actions-runner","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/actions-runner"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.331.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h9mq-3c7r-hw5h.json"}},{"package":{"name":"lerna","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/lerna"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.3-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h9mq-3c7r-hw5h.json"}},{"package":{"name":"librechat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/librechat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h9mq-3c7r-hw5h.json"}},{"package":{"name":"node-gyp","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/node-gyp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h9mq-3c7r-hw5h.json"}},{"package":{"name":"npm","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.9.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h9mq-3c7r-hw5h.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.217.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h9mq-3c7r-hw5h.json"}},{"package":{"name":"renovate","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/renovate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.3.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h9mq-3c7r-hw5h.json"}},{"package":{"name":"sqlpad","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sqlpad"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.7-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h9mq-3c7r-hw5h.json"}},{"package":{"name":"lerna","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/lerna"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.3-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h9mq-3c7r-hw5h.json"}},{"package":{"name":"node-gyp","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/node-gyp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h9mq-3c7r-hw5h.json"}},{"package":{"name":"npm","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.9.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h9mq-3c7r-hw5h.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.217.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h9mq-3c7r-hw5h.json"}},{"package":{"name":"renovate","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/renovate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.3.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h9mq-3c7r-hw5h.json"}},{"package":{"name":"sqlpad","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sqlpad"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.7-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-h9mq-3c7r-hw5h.json"}}]}