{"schema_version":"1.7.3","id":"CGA-vfrc-8hcx-ccqq","published":"2026-01-29T00:48:36.493228Z","modified":"2026-09-07T02:04:29.671241678Z","withdrawn":"2026-09-07T02:04:29.671241531Z","related":["CVE-2023-1732","GHSA-2q89-485c-9j2x","GO-2023-1765"],"affected":[{"package":{"name":"aactl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/aactl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.12-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"flux-0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"flux-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"kyverno-1.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-1.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"kyverno-cli-1.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-cli-1.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"kyverno-init-container-1.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-init-container-1.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"pulumi-language-java","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi-language-java"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"tekton-pipelines","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"tekton-pipelines-entrypoint","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-entrypoint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"tekton-pipelines-events","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-events"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"tekton-pipelines-nop","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-nop"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"tekton-pipelines-resolvers","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-resolvers"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"tekton-pipelines-sidecarlogresults","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-sidecarlogresults"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"tekton-pipelines-webhook","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-webhook"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"tekton-pipelines-workingdirinit","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-workingdirinit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"aactl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/aactl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.12-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"flux-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/flux-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"pulumi-language-java","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi-language-java"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.3-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"tekton-pipelines","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"tekton-pipelines-entrypoint","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-entrypoint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"tekton-pipelines-events","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-events"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"tekton-pipelines-nop","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-nop"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"tekton-pipelines-resolvers","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-resolvers"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"tekton-pipelines-sidecarlogresults","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-sidecarlogresults"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"tekton-pipelines-webhook","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-webhook"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}},{"package":{"name":"tekton-pipelines-workingdirinit","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-workingdirinit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-vfrc-8hcx-ccqq.json"}}]}