{"id":"CGA-49q7-f9qg-cvhg","modified":"2026-07-17T20:10:42.803322724Z","published":"2026-02-20T17:14:11.882700Z","withdrawn":"2026-07-17T20:10:42.803322574Z","related":["CVE-2026-27205","GHSA-68rp-wp8r-4726"],"affected":[{"package":{"name":"airflow-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"airflow-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"airflow-core-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-core-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"kubeflow-volumes-web-app","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-volumes-web-app"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"mitmproxy","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mitmproxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"mlflow","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"open-webui","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/open-webui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"py3.10-ambassador","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"py3.11-ambassador","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"py3.12-ambassador","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"py3.13-ambassador","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.13-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"airflow-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"kubeflow-volumes-web-app","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-volumes-web-app"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"mitmproxy","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mitmproxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"mlflow","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"open-webui","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/open-webui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"py3.10-ambassador","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.10-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"py3.11-ambassador","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.11-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"py3.12-ambassador","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.12-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}},{"package":{"name":"py3.13-ambassador","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/py3.13-ambassador"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-49q7-f9qg-cvhg.json"}}],"schema_version":"1.7.5"}