{"id":"BELL-CVE-2026-39821","modified":"2026-08-26T07:15:07.972137877Z","published":"2026-05-28T06:11:40.129839Z","upstream":["CVE-2026-39821"],"references":[{"type":"ADVISORY","url":"https://docs.bell-sw.com/security/cves/CVE-2026-39821"}],"affected":[{"package":{"name":"buildah","ecosystem":"Alpaquita:23","purl":"pkg:apk/alpaquita/buildah?arch=source&distro=23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.28.0-r1"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"containerd","ecosystem":"Alpaquita:23","purl":"pkg:apk/alpaquita/containerd?arch=source&distro=23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.10-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"go","ecosystem":"Alpaquita:23","purl":"pkg:apk/alpaquita/go?arch=source&distro=23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.19.7-r0"},{"fixed":"1.25.14-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"podman","ecosystem":"Alpaquita:23","purl":"pkg:apk/alpaquita/podman?arch=source&distro=23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.1-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"runc","ecosystem":"Alpaquita:23","purl":"pkg:apk/alpaquita/runc?arch=source&distro=23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.4-r3"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"skopeo","ecosystem":"Alpaquita:23","purl":"pkg:apk/alpaquita/skopeo?arch=source&distro=23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.0-r2"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"buildah","ecosystem":"Alpaquita:25","purl":"pkg:apk/alpaquita/buildah?arch=source&distro=25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.40.0-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"containerd","ecosystem":"Alpaquita:25","purl":"pkg:apk/alpaquita/containerd?arch=source&distro=25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.1-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"docker-cli-buildx","ecosystem":"Alpaquita:25","purl":"pkg:apk/alpaquita/docker-cli-buildx?arch=source&distro=25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.24.0-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"go","ecosystem":"Alpaquita:25","purl":"pkg:apk/alpaquita/go?arch=source&distro=25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.24.3-r0"},{"fixed":"1.25.14-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"google-guest-agent","ecosystem":"Alpaquita:25","purl":"pkg:apk/alpaquita/google-guest-agent?arch=source&distro=25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20250521.00-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"osv-scanner","ecosystem":"Alpaquita:25","purl":"pkg:apk/alpaquita/osv-scanner?arch=source&distro=25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0-r4"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"podman","ecosystem":"Alpaquita:25","purl":"pkg:apk/alpaquita/podman?arch=source&distro=25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.0-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"rootlesskit","ecosystem":"Alpaquita:25","purl":"pkg:apk/alpaquita/rootlesskit?arch=source&distro=25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.5-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"runc","ecosystem":"Alpaquita:25","purl":"pkg:apk/alpaquita/runc?arch=source&distro=25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.3.0-r1"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"skopeo","ecosystem":"Alpaquita:25","purl":"pkg:apk/alpaquita/skopeo?arch=source&distro=25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0-r2"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"buildah","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/buildah?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.31.0-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"calicoctl","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/calicoctl?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.31.3-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"cilium-cli","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/cilium-cli?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.19.0-r12"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"cni-plugins","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/cni-plugins?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0-r2"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"containerd","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/containerd?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.2-r1"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"cri-tools","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/cri-tools?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.35.0-r2"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"docker-cli-buildx","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/docker-cli-buildx?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.11.0-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"etcd","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/etcd?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.4-r6"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"go","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/go?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.20.5-r2"},{"fixed":"1.26.7-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"google-guest-agent","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/google-guest-agent?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20250214.01-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"grype","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/grype?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.100.0-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"helm","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/helm?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.19.0-r4"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"osv-scanner","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/osv-scanner?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0-r2"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"podman","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/podman?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.5.1-r1"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"rootlesskit","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/rootlesskit?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"runc","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/runc?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.7-r1"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"skopeo","ecosystem":"Alpaquita:stream","purl":"pkg:apk/alpaquita/skopeo?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0-r1"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"go","ecosystem":"BellSoft Hardened Containers:23","purl":"pkg:apk/bellsoft-hardened-containers/go?arch=source&distro=23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.19.7-r0"},{"fixed":"1.25.14-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"go","ecosystem":"BellSoft Hardened Containers:25","purl":"pkg:apk/bellsoft-hardened-containers/go?arch=source&distro=25"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.24.3-r0"},{"fixed":"1.25.14-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}},{"package":{"name":"go","ecosystem":"BellSoft Hardened Containers:stream","purl":"pkg:apk/bellsoft-hardened-containers/go?arch=source&distro=stream"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.20.5-r2"},{"fixed":"1.26.7-r0"}]}],"database_specific":{"source":"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-39821.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N"}]}