{"schema_version":"1.7.5","id":"CGA-w7gh-42x2-jfqf","published":"2026-02-12T23:31:47.680880Z","modified":"2026-09-07T02:04:36.713952053Z","withdrawn":"2026-09-07T02:04:36.713951884Z","related":["CVE-2026-25990","GHSA-cfh3-3jmp-rvhc"],"affected":[{"package":{"name":"kubeflow-pipelines-visualization-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-pipelines-visualization-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"label-studio","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/label-studio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"litellm","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/litellm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.81.12.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"mlflow","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"open-webui","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/open-webui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"pgadmin4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pgadmin4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.12-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"pgadmin4-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pgadmin4-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.12-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"py3.10-vllm-cuda-12.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-vllm-cuda-12.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"py3.11-text-generation-inference","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-text-generation-inference"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"py3.12-vllm-cuda-12.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-vllm-cuda-12.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"superset-5.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/superset-5.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-r17"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"superset-6.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/superset-6.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"tensorflow-cpu-jupyter","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tensorflow-cpu-jupyter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"tensorflow-gpu-jupyter","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tensorflow-gpu-jupyter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"tritonserver-backend-vllm-cuda-12.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tritonserver-backend-vllm-cuda-12.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.9.0_git20251112-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"vllm-openai-cuda-12.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vllm-openai-cuda-12.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"kubeflow-pipelines-visualization-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-pipelines-visualization-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"mlflow","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"open-webui","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/open-webui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"superset-5.0","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/superset-5.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-r17"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}},{"package":{"name":"superset-6.0","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/superset-6.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-w7gh-42x2-jfqf.json"}}]}