CGA-2cm6-q4c4-8mch

See a problem?
Please try reporting it to the source first.
Source
https://images.chainguard.dev/security/CGA-2cm6-q4c4-8mch
Import Source
https://advisories.cgr.dev/chainguard/v3/osv/CGA-2cm6-q4c4-8mch.json
JSON Data
https://api.osv.dev/v1/vulns/CGA-2cm6-q4c4-8mch
Related
Withdrawn
2026-09-07T02:02:00Z
Published
2026-08-04T17:21:07Z
Modified
2026-09-07T02:02:00Z
Summary
[none]
Details

Affected packages

Chainguard
actions-runner

Package

Name
actions-runner
Purl
pkg:apk/chainguard/actions-runner

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.336.0-r5

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
code-server

Package

Name
code-server
Purl
pkg:apk/chainguard/code-server

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.130.0-r6

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
graalvm-25-ce-nodejs

Package

Name
graalvm-25-ce-nodejs
Purl
pkg:apk/chainguard/graalvm-25-ce-nodejs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
25.0.4-r15

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
kibana-9.4

Package

Name
kibana-9.4
Purl
pkg:apk/chainguard/kibana-9.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.4.4-r15

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
kibana-9.4-iamguarded

Package

Name
kibana-9.4-iamguarded
Purl
pkg:apk/chainguard/kibana-9.4-iamguarded

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.4.4-r15

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
kubeflow-pipelines-frontend

Package

Name
kubeflow-pipelines-frontend
Purl
pkg:apk/chainguard/kubeflow-pipelines-frontend

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.17.0-r3

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
langfuse-3-worker

Package

Name
langfuse-3-worker
Purl
pkg:apk/chainguard/langfuse-3-worker

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.225.1-r2

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
langfuse-4-worker

Package

Name
langfuse-4-worker
Purl
pkg:apk/chainguard/langfuse-4-worker

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.6.0-r0

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
langfuse-fips-3-worker

Package

Name
langfuse-fips-3-worker
Purl
pkg:apk/chainguard/langfuse-fips-3-worker

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.225.1-r1

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
langfuse-fips-4-worker

Package

Name
langfuse-fips-4-worker
Purl
pkg:apk/chainguard/langfuse-fips-4-worker

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.4.0-r0

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
lerna

Package

Name
lerna
Purl
pkg:apk/chainguard/lerna

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.0.7-r17

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
librechat

Package

Name
librechat
Purl
pkg:apk/chainguard/librechat

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.8.7-r7

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
npm-12

Package

Name
npm-12
Purl
pkg:apk/chainguard/npm-12

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
12.0.2-r2

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
opensearch-dashboards-2-fips-security-dashboards-plugin

Package

Name
opensearch-dashboards-2-fips-security-dashboards-plugin
Purl
pkg:apk/chainguard/opensearch-dashboards-2-fips-security-dashboards-plugin

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.19.6-r1

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
opensearch-dashboards-2-security-dashboards-plugin

Package

Name
opensearch-dashboards-2-security-dashboards-plugin
Purl
pkg:apk/chainguard/opensearch-dashboards-2-security-dashboards-plugin

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.19.6-r14

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
opensearch-dashboards-3

Package

Name
opensearch-dashboards-3
Purl
pkg:apk/chainguard/opensearch-dashboards-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.7.0-r13

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
opensearch-dashboards-3-fips

Package

Name
opensearch-dashboards-3-fips
Purl
pkg:apk/chainguard/opensearch-dashboards-3-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.7.0-r18

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
prism

Package

Name
prism
Purl
pkg:apk/chainguard/prism

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.16.0-r4

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
pulumi-language-nodejs

Package

Name
pulumi-language-nodejs
Purl
pkg:apk/chainguard/pulumi-language-nodejs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.256.0-r1

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
renovate

Package

Name
renovate
Purl
pkg:apk/chainguard/renovate

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
44.23.3-r1

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
saf

Package

Name
saf
Purl
pkg:apk/chainguard/saf

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.7.0-r0

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
sqlpad

Package

Name
sqlpad
Purl
pkg:apk/chainguard/sqlpad

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.5.7-r31

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
unleash

Package

Name
unleash
Purl
pkg:apk/chainguard/unleash

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.0.3-r5

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
unleash-fips

Package

Name
unleash-fips
Purl
pkg:apk/chainguard/unleash-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.0.3-r7

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
unleash-proxy

Package

Name
unleash-proxy
Purl
pkg:apk/chainguard/unleash-proxy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.19-r7

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
wazuh-dashboard

Package

Name
wazuh-dashboard
Purl
pkg:apk/chainguard/wazuh-dashboard

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14.7-r5

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
wazuh-dashboard-fips

Package

Name
wazuh-dashboard-fips
Purl
pkg:apk/chainguard/wazuh-dashboard-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14.7-r5

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
wazuh-dashboard-security-plugin

Package

Name
wazuh-dashboard-security-plugin
Purl
pkg:apk/chainguard/wazuh-dashboard-security-plugin

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14.7-r5

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
wazuh-dashboard-security-plugin-fips

Package

Name
wazuh-dashboard-security-plugin-fips
Purl
pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14.7-r6

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
Wolfi
code-server

Package

Name
code-server
Purl
pkg:apk/wolfi/code-server

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.130.0-r6

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
kubeflow-pipelines-frontend

Package

Name
kubeflow-pipelines-frontend
Purl
pkg:apk/wolfi/kubeflow-pipelines-frontend

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.17.0-r3

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
langfuse-3-worker

Package

Name
langfuse-3-worker
Purl
pkg:apk/wolfi/langfuse-3-worker

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.225.1-r2

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
lerna

Package

Name
lerna
Purl
pkg:apk/wolfi/lerna

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.0.7-r17

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
npm-12

Package

Name
npm-12
Purl
pkg:apk/wolfi/npm-12

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
12.0.2-r2

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
opensearch-dashboards-3

Package

Name
opensearch-dashboards-3
Purl
pkg:apk/wolfi/opensearch-dashboards-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.7.0-r13

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
prism

Package

Name
prism
Purl
pkg:apk/wolfi/prism

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.16.0-r4

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
pulumi-language-nodejs

Package

Name
pulumi-language-nodejs
Purl
pkg:apk/wolfi/pulumi-language-nodejs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.256.0-r1

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
renovate

Package

Name
renovate
Purl
pkg:apk/wolfi/renovate

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
44.23.3-r1

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
saf

Package

Name
saf
Purl
pkg:apk/wolfi/saf

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.7.0-r0

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"
sqlpad

Package

Name
sqlpad
Purl
pkg:apk/wolfi/sqlpad

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.5.7-r31

Database specific

source 
"https://packages.cgr.dev/chainguard/osv/CGA-2cm6-q4c4-8mch.json"