{"schema_version":"1.8.0","id":"CGA-q6q9-f5cq-5pgw","published":"2026-03-19T21:45:05.466019Z","modified":"2026-09-07T02:04:23.222408148Z","withdrawn":"2026-09-07T02:04:23.222408003Z","related":["CVE-2026-33487","GHSA-479m-364c-43vc","GO-2026-4753"],"affected":[{"package":{"name":"commercial-grafana-11.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/commercial-grafana-11.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.6.14-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"commercial-grafana-12.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/commercial-grafana-12.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.10-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"commercial-grafana-12.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/commercial-grafana-12.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.8-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"commercial-grafana-12.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/commercial-grafana-12.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.6-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"commercial-grafana-12.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/commercial-grafana-12.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.4.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"dex","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dex"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"dex-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/dex-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"gotrue","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gotrue"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.188.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"gotrue-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gotrue-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.188.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"mattermost-10.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mattermost-10.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.11.13-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"mattermost-11.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mattermost-11.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"mattermost-11.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mattermost-11.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.4.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"mattermost-11.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mattermost-11.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.5.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"mattermost-fips-10.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mattermost-fips-10.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.11.13-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"mattermost-fips-11.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mattermost-fips-11.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"mattermost-fips-11.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mattermost-fips-11.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"mattermost-fips-11.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mattermost-fips-11.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.4.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"mattermost-fips-11.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mattermost-fips-11.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.5.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"neuvector-controller","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/neuvector-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"neuvector-controller-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/neuvector-controller-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"neuvector-upgrader","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/neuvector-upgrader"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"neuvector-upgrader-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/neuvector-upgrader-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"omni","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/omni"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"omni-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/omni-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"rancher-2.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-2.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.11-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"rancher-2.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-2.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.11-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"rancher-2.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-2.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"rancher-2.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"rancher-agent-2.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-agent-2.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.11-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"rancher-agent-2.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-agent-2.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.11-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"rancher-agent-2.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-agent-2.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"rancher-agent-2.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rancher-agent-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/teleport-17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.7.20-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-17-kube-agent-updater","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/teleport-17-kube-agent-updater"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.7.20-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-17-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/teleport-17-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.7.20-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-18","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/teleport-18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.7.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-18-kube-agent-updater","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/teleport-18-kube-agent-updater"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.7.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-18-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/teleport-18-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.7.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-18.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/teleport-18.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.6.8-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-18.6-kube-agent-updater","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/teleport-18.6-kube-agent-updater"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.6.8-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-18.6-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/teleport-18.6-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.6.8-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-operator-fips-16","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/teleport-operator-fips-16"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.5.18-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-operator-fips-17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/teleport-operator-fips-17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.7.20-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-operator-fips-18","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/teleport-operator-fips-18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.7.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"zitadel-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zitadel-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.9-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"zitadel-4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zitadel-4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"dex","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/dex"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"mattermost-11.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mattermost-11.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.10.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"mattermost-11.4","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mattermost-11.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.4.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"mattermost-11.5","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mattermost-11.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.5.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"rancher-2.13","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rancher-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"rancher-agent-2.13","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rancher-agent-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-18","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/teleport-18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.7.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-18-kube-agent-updater","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/teleport-18-kube-agent-updater"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.7.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-18-operator","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/teleport-18-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.7.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-18.6","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/teleport-18.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.6.8-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-18.6-kube-agent-updater","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/teleport-18.6-kube-agent-updater"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.6.8-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}},{"package":{"name":"teleport-18.6-operator","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/teleport-18.6-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.6.8-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6q9-f5cq-5pgw.json"}}]}