{"schema_version":"1.9.0","id":"CGA-q2x7-428q-vmjp","published":"2026-08-04T19:35:11Z","modified":"2026-09-07T02:03:54.350036138Z","withdrawn":"2026-09-07T02:03:54.350035900Z","related":["CVE-2026-69244","GHSA-cq5v-8q36-5273"],"affected":[{"package":{"name":"airflow-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"airflow-core-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-core-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"apache-beam-python-3.11-sdk","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-beam-python-3.11-sdk"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.75.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"apache-beam-python-3.12-sdk","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-beam-python-3.12-sdk"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.75.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"apache-beam-python-3.13-sdk","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-beam-python-3.13-sdk"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.75.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"awx","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/awx"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.6.1-r49"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"dask-kubernetes","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dask-kubernetes"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.3.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"dask-kubernetes-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dask-kubernetes-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.3.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"datahub-ingestion-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/datahub-ingestion-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"kserve-models-web-app","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-models-web-app"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"kserve-storage-controller","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-storage-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"lmcache-cuda-12.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/lmcache-cuda-12.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"open-webui","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/open-webui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"puppygraph-python","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/puppygraph-python"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.6-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"py3-cassandra-medusa","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-cassandra-medusa"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"py3.10-vllm-cuda-12.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-vllm-cuda-12.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"py3.12-vllm-cuda-12.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-vllm-cuda-12.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"py3.13-scanner-test-libraries-aiohttp","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-scanner-test-libraries-aiohttp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"text-generation-inference","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/text-generation-inference"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-r23"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"tritonserver-backend-vllm-cuda-13.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tritonserver-backend-vllm-cuda-13.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.11-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"vllm-cuda-13.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vllm-cuda-13.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"airflow-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"dask-kubernetes","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/dask-kubernetes"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.3.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"kserve-storage-controller","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-storage-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"open-webui","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/open-webui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}},{"package":{"name":"py3-cassandra-medusa","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-cassandra-medusa"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q2x7-428q-vmjp.json"}}]}