{
  "modified": "2026-05-18T12:26:47Z",
  "id": "CGA-r267-px9w-2f4f",
  "related": [
    "CVE-2026-42338",
    "GHSA-v2v4-37r5-5v8g"
  ],
  "affected": [
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "actions-runner",
        "purl": "pkg:apk/chainguard/actions-runner"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.334.0-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "code-server",
        "purl": "pkg:apk/chainguard/code-server"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.112.0-r4"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "gemini-cli",
        "purl": "pkg:apk/chainguard/gemini-cli"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.41.2-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "kubeflow-pipelines-frontend",
        "purl": "pkg:apk/chainguard/kubeflow-pipelines-frontend"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.16.1-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "langfuse-3",
        "purl": "pkg:apk/chainguard/langfuse-3"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.174.1-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "langfuse-3-worker",
        "purl": "pkg:apk/chainguard/langfuse-3-worker"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.174.1-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "langfuse-fips-3",
        "purl": "pkg:apk/chainguard/langfuse-fips-3"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.174.1-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "langfuse-fips-3-worker",
        "purl": "pkg:apk/chainguard/langfuse-fips-3-worker"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.174.1-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "lerna",
        "purl": "pkg:apk/chainguard/lerna"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.0.7-r4"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "librechat",
        "purl": "pkg:apk/chainguard/librechat"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.8.4-r6"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "npm",
        "purl": "pkg:apk/chainguard/npm"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "11.14.0-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "opensearch-dashboards-3",
        "purl": "pkg:apk/chainguard/opensearch-dashboards-3"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.0-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "opensearch-dashboards-3-fips",
        "purl": "pkg:apk/chainguard/opensearch-dashboards-3-fips"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.0-r5"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "opensearch-dashboards-3-fips-security-dashboards-plugin",
        "purl": "pkg:apk/chainguard/opensearch-dashboards-3-fips-security-dashboards-plugin"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.0-r5"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "opensearch-dashboards-3-security-dashboards-plugin",
        "purl": "pkg:apk/chainguard/opensearch-dashboards-3-security-dashboards-plugin"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.0-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "prism",
        "purl": "pkg:apk/chainguard/prism"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.15.10-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "pulumi-language-nodejs",
        "purl": "pkg:apk/chainguard/pulumi-language-nodejs"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.237.0-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "sqlpad",
        "purl": "pkg:apk/chainguard/sqlpad"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.5.7-r20"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "tileserver-gl",
        "purl": "pkg:apk/chainguard/tileserver-gl"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.6.0-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "tileserver-gl-fips",
        "purl": "pkg:apk/chainguard/tileserver-gl-fips"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.6.0-r2"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "code-server",
        "purl": "pkg:apk/wolfi/code-server"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.112.0-r4"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "kubeflow-pipelines-frontend",
        "purl": "pkg:apk/wolfi/kubeflow-pipelines-frontend"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.16.1-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "langfuse-3",
        "purl": "pkg:apk/wolfi/langfuse-3"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.174.1-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "langfuse-3-worker",
        "purl": "pkg:apk/wolfi/langfuse-3-worker"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.174.1-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "lerna",
        "purl": "pkg:apk/wolfi/lerna"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.0.7-r4"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "npm",
        "purl": "pkg:apk/wolfi/npm"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "11.14.0-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "opensearch-dashboards-3",
        "purl": "pkg:apk/wolfi/opensearch-dashboards-3"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.0-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "opensearch-dashboards-3-security-dashboards-plugin",
        "purl": "pkg:apk/wolfi/opensearch-dashboards-3-security-dashboards-plugin"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.0-r3"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "prism",
        "purl": "pkg:apk/wolfi/prism"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.15.10-r0"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "pulumi-language-nodejs",
        "purl": "pkg:apk/wolfi/pulumi-language-nodejs"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.237.0-r1"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "sqlpad",
        "purl": "pkg:apk/wolfi/sqlpad"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.5.7-r20"
            }
          ]
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Wolfi",
        "name": "tileserver-gl",
        "purl": "pkg:apk/wolfi/tileserver-gl"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.6.0-r2"
            }
          ]
        }
      ]
    }
  ]
}