{"id":"CGA-39qr-jmx6-xj3f","modified":"2026-07-17T20:09:54.731933843Z","published":"2026-01-12T17:00:34.268690Z","withdrawn":"2026-07-17T20:09:54.731933691Z","related":["CVE-2025-8869","GHSA-4xh5-x5gv-qwph"],"affected":[{"package":{"name":"airflow-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"airflow-2-bitnami-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-2-bitnami-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"airflow-2-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-2-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"airflow-2-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-2-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"graalvm-25-graalpy-venv","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/graalvm-25-graalpy-venv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.2-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"localstack","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/localstack"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"mlflow","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"mlflow-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"nvidia-nsight-compute-13.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nvidia-nsight-compute-13.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.4.1.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-cassandra-medusa","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-cassandra-medusa"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-pip-wheel","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-pip-wheel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-pip-wheel-bootstrap","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-pip-wheel-bootstrap"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-supported-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3-supported-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.10-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.10-pip-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.10-pytorch-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-pytorch-cuda-11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.10-virtualenv","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-virtualenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.10-wheels-torch-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-wheels-torch-cuda-11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.11-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.11-pip-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.11-virtualenv","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-virtualenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.12-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.12-pip-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.12-pytorch-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-pytorch-cuda-11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.12-virtualenv","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-virtualenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.12-wheels-torch-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-wheels-torch-cuda-11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.13-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.13-pip-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.13-virtualenv","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-virtualenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.14-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.14-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.14-pip-base","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.14-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.9-pip","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.9-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"reflex","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/reflex"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.14-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"request-1276","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/request-1276"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"mlflow","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"mlflow-bitnami","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-cassandra-medusa","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-cassandra-medusa"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-pip-wheel","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-pip-wheel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-pip-wheel-bootstrap","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-pip-wheel-bootstrap"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3-supported-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3-supported-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.10-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.10-pip-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.10-virtualenv","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-virtualenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.11-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.11-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.11-pip-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.11-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.11-virtualenv","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.11-virtualenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.12-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.12-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.12-pip-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.12-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.12-virtualenv","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.12-virtualenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.13-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.13-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.13-pip-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.13-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.13-virtualenv","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.13-virtualenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.14-pip","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.14-pip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"py3.14-pip-base","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.14-pip-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}},{"package":{"name":"reflex","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/reflex"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.14-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-39qr-jmx6-xj3f.json"}}],"schema_version":"1.7.5"}