{
  "modified": "2026-04-09T00:17:07Z",
  "id": "CGA-q9mv-c959-35cj",
  "related": [
    "CVE-2026-34073",
    "GHSA-m959-cc7f-wv43"
  ],
  "affected": [
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "airflow-2",
        "purl": "pkg:apk/chainguard/airflow-2"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.11.2-r5"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "airflow-3",
        "purl": "pkg:apk/chainguard/airflow-3"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.1.8-r10"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "airflow-core-2",
        "purl": "pkg:apk/chainguard/airflow-core-2"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.11.2-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "airflow-core-3",
        "purl": "pkg:apk/chainguard/airflow-core-3"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.1.8-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "ansible-operator",
        "purl": "pkg:apk/chainguard/ansible-operator"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.42.2-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "ansible-operator-fips",
        "purl": "pkg:apk/chainguard/ansible-operator-fips"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.42.2-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "apache-beam-python-3.11-sdk",
        "purl": "pkg:apk/chainguard/apache-beam-python-3.11-sdk"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.71.0-r8"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "apache-beam-python-3.12-sdk",
        "purl": "pkg:apk/chainguard/apache-beam-python-3.12-sdk"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.71.0-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "apache-beam-python-3.13-sdk",
        "purl": "pkg:apk/chainguard/apache-beam-python-3.13-sdk"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.71.0-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "dask-kubernetes",
        "purl": "pkg:apk/chainguard/dask-kubernetes"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2026.3.0-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "datadog-agent-7.76-core-integrations",
        "purl": "pkg:apk/chainguard/datadog-agent-7.76-core-integrations"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.76.3-r6"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "datadog-agent-fips-7.76-core-integrations",
        "purl": "pkg:apk/chainguard/datadog-agent-fips-7.76-core-integrations"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.76.3-r4"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "gitlab-toolbox-ce-18.7",
        "purl": "pkg:apk/chainguard/gitlab-toolbox-ce-18.7"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "18.7.6-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "gitlab-toolbox-ce-18.9",
        "purl": "pkg:apk/chainguard/gitlab-toolbox-ce-18.9"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "18.9.3-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "gitlab-toolbox-ce-fips-18.9",
        "purl": "pkg:apk/chainguard/gitlab-toolbox-ce-fips-18.9"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "18.9.3-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "in-toto",
        "purl": "pkg:apk/chainguard/in-toto"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.0-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "jupyter-base-notebook",
        "purl": "pkg:apk/chainguard/jupyter-base-notebook"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.5.5-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "k8s-sidecar",
        "purl": "pkg:apk/chainguard/k8s-sidecar"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.5.1-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "kserve-storage-controller",
        "purl": "pkg:apk/chainguard/kserve-storage-controller"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.16.0-r24"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "kubeflow-jupyter-web-app",
        "purl": "pkg:apk/chainguard/kubeflow-jupyter-web-app"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.10.0-r13"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "kubeflow-volumes-web-app",
        "purl": "pkg:apk/chainguard/kubeflow-volumes-web-app"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.10.0-r12"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "litellm",
        "purl": "pkg:apk/chainguard/litellm"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.82.3.0-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "localstack",
        "purl": "pkg:apk/chainguard/localstack"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.14.0-r6"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "mitmproxy",
        "purl": "pkg:apk/chainguard/mitmproxy"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "12.2.1-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "mycli",
        "purl": "pkg:apk/chainguard/mycli"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.67.1-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "opal",
        "purl": "pkg:apk/chainguard/opal"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.9.4-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "pgadmin4",
        "purl": "pkg:apk/chainguard/pgadmin4"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.13-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "pgadmin4-fips",
        "purl": "pkg:apk/chainguard/pgadmin4-fips"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.13-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "py3-cassandra-medusa",
        "purl": "pkg:apk/chainguard/py3-cassandra-medusa"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.27.0-r6"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "semgrep",
        "purl": "pkg:apk/chainguard/semgrep"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.157.0-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "synapse",
        "purl": "pkg:apk/chainguard/synapse"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.151.0-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "wazuh-manager-framework",
        "purl": "pkg:apk/chainguard/wazuh-manager-framework"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.14.4-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "airflow-3",
        "purl": "pkg:apk/wolfi/airflow-3"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.1.8-r10"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "ansible-operator",
        "purl": "pkg:apk/wolfi/ansible-operator"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.42.2-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "dask-kubernetes",
        "purl": "pkg:apk/wolfi/dask-kubernetes"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2026.3.0-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "datadog-agent-7.76-core-integrations",
        "purl": "pkg:apk/wolfi/datadog-agent-7.76-core-integrations"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.76.3-r6"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "in-toto",
        "purl": "pkg:apk/wolfi/in-toto"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.0-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "jupyter-base-notebook",
        "purl": "pkg:apk/wolfi/jupyter-base-notebook"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.5.5-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "k8s-sidecar",
        "purl": "pkg:apk/wolfi/k8s-sidecar"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.5.1-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "kserve-storage-controller",
        "purl": "pkg:apk/wolfi/kserve-storage-controller"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.16.0-r24"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "kubeflow-jupyter-web-app",
        "purl": "pkg:apk/wolfi/kubeflow-jupyter-web-app"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.10.0-r13"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "kubeflow-volumes-web-app",
        "purl": "pkg:apk/wolfi/kubeflow-volumes-web-app"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.10.0-r12"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "mitmproxy",
        "purl": "pkg:apk/wolfi/mitmproxy"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "12.2.1-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "mycli",
        "purl": "pkg:apk/wolfi/mycli"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.67.1-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "py3-cassandra-medusa",
        "purl": "pkg:apk/wolfi/py3-cassandra-medusa"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.27.0-r6"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "semgrep",
        "purl": "pkg:apk/wolfi/semgrep"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.157.0-r1"
            }
          ]
        }
      ]
    }
  ]
}