{
  "modified": "2026-04-29T21:39:07Z",
  "id": "CGA-9c4c-5h22-fv67",
  "related": [
    "CVE-2026-39892",
    "GHSA-p423-j2cm-9vmq"
  ],
  "affected": [
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "airflow-2",
        "purl": "pkg:apk/chainguard/airflow-2"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.11.2-r8"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "airflow-3",
        "purl": "pkg:apk/chainguard/airflow-3"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.2.0-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "airflow-core-2",
        "purl": "pkg:apk/chainguard/airflow-core-2"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.11.2-r5"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "airflow-core-3",
        "purl": "pkg:apk/chainguard/airflow-core-3"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.2.0-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "apache-beam-python-3.11-sdk",
        "purl": "pkg:apk/chainguard/apache-beam-python-3.11-sdk"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.72.0-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "apache-beam-python-3.12-sdk",
        "purl": "pkg:apk/chainguard/apache-beam-python-3.12-sdk"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.72.0-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "apache-beam-python-3.13-sdk",
        "purl": "pkg:apk/chainguard/apache-beam-python-3.13-sdk"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.72.0-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "authentik-2025.12",
        "purl": "pkg:apk/chainguard/authentik-2025.12"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2025.12.4-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "authentik-2026.2",
        "purl": "pkg:apk/chainguard/authentik-2026.2"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2026.2.1-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "barman-cloudnative-pg",
        "purl": "pkg:apk/chainguard/barman-cloudnative-pg"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.18.0-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "dagster",
        "purl": "pkg:apk/chainguard/dagster"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.13.2-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "dask-kubernetes",
        "purl": "pkg:apk/chainguard/dask-kubernetes"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2026.3.0-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "datadog-agent-7.75-core-integrations",
        "purl": "pkg:apk/chainguard/datadog-agent-7.75-core-integrations"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.75.4-r6"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "datadog-agent-fips-7.75-core-integrations",
        "purl": "pkg:apk/chainguard/datadog-agent-fips-7.75-core-integrations"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.75.4-r4"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "gitlab-toolbox-ce-fips-18.7",
        "purl": "pkg:apk/chainguard/gitlab-toolbox-ce-fips-18.7"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "18.7.6-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "in-toto",
        "purl": "pkg:apk/chainguard/in-toto"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.1.0-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "jupyter-base-notebook",
        "purl": "pkg:apk/chainguard/jupyter-base-notebook"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.5.5-r4"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "k8s-sidecar",
        "purl": "pkg:apk/chainguard/k8s-sidecar"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.0-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "kserve-storage-controller",
        "purl": "pkg:apk/chainguard/kserve-storage-controller"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.16.0-r25"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "kubeflow-jupyter-web-app",
        "purl": "pkg:apk/chainguard/kubeflow-jupyter-web-app"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.10.0-r15"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "kubeflow-pipelines-visualization-server",
        "purl": "pkg:apk/chainguard/kubeflow-pipelines-visualization-server"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.16.0-r4"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "kubeflow-volumes-web-app",
        "purl": "pkg:apk/chainguard/kubeflow-volumes-web-app"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.10.0-r16"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "label-studio",
        "purl": "pkg:apk/chainguard/label-studio"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.23.0-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "localstack",
        "purl": "pkg:apk/chainguard/localstack"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.14.0-r8"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "metaflow-service",
        "purl": "pkg:apk/chainguard/metaflow-service"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.5.0-r10"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "mitmproxy",
        "purl": "pkg:apk/chainguard/mitmproxy"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "12.2.2-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "mycli",
        "purl": "pkg:apk/chainguard/mycli"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.68.1-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "nemo",
        "purl": "pkg:apk/chainguard/nemo"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.2-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "opal",
        "purl": "pkg:apk/chainguard/opal"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.9.4-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "open-webui",
        "purl": "pkg:apk/chainguard/open-webui"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.8.12-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "pgadmin4",
        "purl": "pkg:apk/chainguard/pgadmin4"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.14-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "pgadmin4-fips",
        "purl": "pkg:apk/chainguard/pgadmin4-fips"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.14-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "py3-cassandra-medusa",
        "purl": "pkg:apk/chainguard/py3-cassandra-medusa"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.27.1-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "py3.11-prefect",
        "purl": "pkg:apk/chainguard/py3.11-prefect"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.26-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "py3.12-prefect",
        "purl": "pkg:apk/chainguard/py3.12-prefect"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.26-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "py3.13-prefect",
        "purl": "pkg:apk/chainguard/py3.13-prefect"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.26-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "py3.14-prefect",
        "purl": "pkg:apk/chainguard/py3.14-prefect"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.26-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "request-1276",
        "purl": "pkg:apk/chainguard/request-1276"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.27.1-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "semgrep",
        "purl": "pkg:apk/chainguard/semgrep"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.160.0-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "superset-5.0",
        "purl": "pkg:apk/chainguard/superset-5.0"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.0.0-r23"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "superset-6.0",
        "purl": "pkg:apk/chainguard/superset-6.0"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.0.0-r8"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "tritonserver-backend-vllm-cuda-13.0",
        "purl": "pkg:apk/chainguard/tritonserver-backend-vllm-cuda-13.0"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "25.11-r4"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "vllm-openai-cuda-12.9",
        "purl": "pkg:apk/chainguard/vllm-openai-cuda-12.9"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.19.0-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "wazuh-manager-framework",
        "purl": "pkg:apk/chainguard/wazuh-manager-framework"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.14.4-r5"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "airflow-3",
        "purl": "pkg:apk/wolfi/airflow-3"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.2.0-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "dask-kubernetes",
        "purl": "pkg:apk/wolfi/dask-kubernetes"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2026.3.0-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "datadog-agent-7.75-core-integrations",
        "purl": "pkg:apk/wolfi/datadog-agent-7.75-core-integrations"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.75.4-r6"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "in-toto",
        "purl": "pkg:apk/wolfi/in-toto"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.1.0-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "jupyter-base-notebook",
        "purl": "pkg:apk/wolfi/jupyter-base-notebook"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.5.5-r4"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "k8s-sidecar",
        "purl": "pkg:apk/wolfi/k8s-sidecar"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.0-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "kserve-storage-controller",
        "purl": "pkg:apk/wolfi/kserve-storage-controller"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.16.0-r25"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "kubeflow-jupyter-web-app",
        "purl": "pkg:apk/wolfi/kubeflow-jupyter-web-app"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.10.0-r15"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "kubeflow-pipelines-visualization-server",
        "purl": "pkg:apk/wolfi/kubeflow-pipelines-visualization-server"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.16.0-r4"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "kubeflow-volumes-web-app",
        "purl": "pkg:apk/wolfi/kubeflow-volumes-web-app"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.10.0-r16"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "mitmproxy",
        "purl": "pkg:apk/wolfi/mitmproxy"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "12.2.2-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "mycli",
        "purl": "pkg:apk/wolfi/mycli"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.68.1-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "open-webui",
        "purl": "pkg:apk/wolfi/open-webui"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.8.12-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "py3-cassandra-medusa",
        "purl": "pkg:apk/wolfi/py3-cassandra-medusa"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.27.1-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "semgrep",
        "purl": "pkg:apk/wolfi/semgrep"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.160.0-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "superset-5.0",
        "purl": "pkg:apk/wolfi/superset-5.0"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.0.0-r23"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "superset-6.0",
        "purl": "pkg:apk/wolfi/superset-6.0"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.0.0-r8"
            }
          ]
        }
      ]
    }
  ]
}