{"id":"CGA-3xfw-w9h3-278h","modified":"2026-07-17T20:10:21.906166623Z","published":"2026-06-09T17:26:11Z","withdrawn":"2026-07-17T20:10:21.906166476Z","related":["CVE-2026-44894","GHSA-cmm3-54f8-px4j"],"affected":[{"package":{"name":"apache-hop","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-hop"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"apache-nifi","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-nifi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"camunda-8.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-8.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.6-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"camunda-zeebe-8.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.6-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"opensearch-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"opensearch-3-repository-azure","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-3-repository-azure"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"opensearch-3-security","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-3-security"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"opensearch-fips-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-fips-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"opensearch-fips-3-repository-azure","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-fips-3-repository-azure"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"opensearch-fips-3-security","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-fips-3-security"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"spark-fips-4.1-scala-2.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-fips-4.1-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-delta-lake","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-delta-lake"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-exchange-filesystem","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-exchange-filesystem"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-exchange-hdfs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-exchange-hdfs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-hive","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-hive"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-hudi","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-hudi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-iceberg","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-iceberg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-lakehouse","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-lakehouse"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-pinot","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-pinot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-spooling-filesystem","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-spooling-filesystem"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"apache-nifi","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-nifi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"opensearch-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"opensearch-3-repository-azure","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-3-repository-azure"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"opensearch-3-security","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-3-security"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-delta-lake","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-delta-lake"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-exchange-filesystem","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-exchange-filesystem"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-exchange-hdfs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-exchange-hdfs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-hive","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-hive"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-hudi","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-hudi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-iceberg","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-iceberg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-lakehouse","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-lakehouse"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-pinot","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-pinot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}},{"package":{"name":"trino-plugin-spooling-filesystem","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-spooling-filesystem"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"481-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3xfw-w9h3-278h.json"}}],"schema_version":"1.7.5"}