{
  "modified": "2026-04-28T20:46:08Z",
  "id": "CGA-8qgr-x76h-39pw",
  "related": [
    "CVE-2026-35204",
    "GHSA-vmx8-mqv2-9gmg"
  ],
  "affected": [
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "cert-manager-cmctl",
        "purl": "pkg:apk/chainguard/cert-manager-cmctl"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.1-r5"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "cert-manager-cmctl-fips",
        "purl": "pkg:apk/chainguard/cert-manager-cmctl-fips"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.1-r5"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "flux-2.8",
        "purl": "pkg:apk/chainguard/flux-2.8"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.5-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "flux-fips-2.8",
        "purl": "pkg:apk/chainguard/flux-fips-2.8"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.5-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "flux-source-controller",
        "purl": "pkg:apk/chainguard/flux-source-controller"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.2-r4"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "flux-source-controller-fips",
        "purl": "pkg:apk/chainguard/flux-source-controller-fips"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.2-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "gitlab-operator",
        "purl": "pkg:apk/chainguard/gitlab-operator"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.11.1-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "gitlab-operator-fips",
        "purl": "pkg:apk/chainguard/gitlab-operator-fips"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.11.1-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "helm-diff",
        "purl": "pkg:apk/chainguard/helm-diff"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.15.5-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "helm-diff-fips",
        "purl": "pkg:apk/chainguard/helm-diff-fips"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.15.5-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "helm-push",
        "purl": "pkg:apk/chainguard/helm-push"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.11.1-r8"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "kots",
        "purl": "pkg:apk/chainguard/kots"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.130.0-r4"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "kumactl-2.13",
        "purl": "pkg:apk/chainguard/kumactl-2.13"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.13.4-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "rancher-fleet-agent",
        "purl": "pkg:apk/chainguard/rancher-fleet-agent"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r5"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "rancher-fleet-agent-fips",
        "purl": "pkg:apk/chainguard/rancher-fleet-agent-fips"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "rancher-fleet-cli",
        "purl": "pkg:apk/chainguard/rancher-fleet-cli"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r5"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "rancher-fleet-cli-fips",
        "purl": "pkg:apk/chainguard/rancher-fleet-cli-fips"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "rancher-fleet-controller",
        "purl": "pkg:apk/chainguard/rancher-fleet-controller"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r5"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "rancher-fleet-controller-fips",
        "purl": "pkg:apk/chainguard/rancher-fleet-controller-fips"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "zarf",
        "purl": "pkg:apk/chainguard/zarf"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.74.2-r6"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "zarf-fips",
        "purl": "pkg:apk/chainguard/zarf-fips"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.74.2-r5"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "cert-manager-cmctl",
        "purl": "pkg:apk/wolfi/cert-manager-cmctl"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.1-r5"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "flux-2.8",
        "purl": "pkg:apk/wolfi/flux-2.8"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.5-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "flux-source-controller",
        "purl": "pkg:apk/wolfi/flux-source-controller"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.2-r4"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "helm-push",
        "purl": "pkg:apk/wolfi/helm-push"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.11.1-r8"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "kots",
        "purl": "pkg:apk/wolfi/kots"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.130.0-r4"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "kumactl-2.13",
        "purl": "pkg:apk/wolfi/kumactl-2.13"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.13.4-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "rancher-fleet-agent",
        "purl": "pkg:apk/wolfi/rancher-fleet-agent"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r5"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "rancher-fleet-cli",
        "purl": "pkg:apk/wolfi/rancher-fleet-cli"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r5"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "rancher-fleet-controller",
        "purl": "pkg:apk/wolfi/rancher-fleet-controller"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r5"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "zarf",
        "purl": "pkg:apk/wolfi/zarf"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.74.2-r6"
            }
          ]
        }
      ]
    }
  ]
}