{"id":"CGA-5hwq-fqv8-3gwc","modified":"2026-07-17T20:11:35.327737983Z","published":"2026-01-15T03:54:47.497247Z","withdrawn":"2026-07-17T20:11:35.327737740Z","related":["CVE-2020-8552","GHSA-82hx-w2r5-c2wq"],"affected":[{"package":{"name":"argo-cd-2.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-2.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"argo-cd-2.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/argo-cd-2.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"aws-ebs-csi-driver","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/aws-ebs-csi-driver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"aws-ebs-csi-driver-1.18","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/aws-ebs-csi-driver-1.18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"aws-ebs-csi-driver-1.19","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/aws-ebs-csi-driver-1.19"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"calico","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/calico"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"cert-manager-1.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cert-manager-1.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"cert-manager-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cert-manager-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"flux-helm-controller","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-helm-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"flux-helm-controller-0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-helm-controller-0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"flux-helm-controller-0.37","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-helm-controller-0.37"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"gatekeeper-3.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gatekeeper-3.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"gatekeeper-3.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gatekeeper-3.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"haproxy-ingress","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/haproxy-ingress"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"helm","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/helm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"helm-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/helm-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"helm-4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/helm-4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"istio-pilot-agent-1.18","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/istio-pilot-agent-1.18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"istio-pilot-agent-fips-1.19","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/istio-pilot-agent-fips-1.19"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"istio-pilot-discovery-1.19","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/istio-pilot-discovery-1.19"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"istio-pilot-discovery-fips-1.19","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/istio-pilot-discovery-fips-1.19"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"k8sgpt","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/k8sgpt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"kargo","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kargo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"keda","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keda"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"keda-2.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keda-2.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"keda-2.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keda-2.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"keda-2.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keda-2.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"kube-oidc-proxy","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kube-oidc-proxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"kubeflow-pipelines","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-pipelines"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"kubernetes-csi-external-provisioner","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubernetes-csi-external-provisioner"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"kubernetes-csi-external-resizer","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubernetes-csi-external-resizer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"kubevela","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubevela"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"metrics-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/metrics-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"argo-cd-2.7","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-cd-2.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"argo-cd-2.8","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/argo-cd-2.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"aws-ebs-csi-driver","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/aws-ebs-csi-driver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"calico","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/calico"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"cert-manager-1.11","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/cert-manager-1.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"cert-manager-1.12","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/cert-manager-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"flux-helm-controller","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/flux-helm-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"gatekeeper-3.12","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gatekeeper-3.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"gatekeeper-3.13","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gatekeeper-3.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"haproxy-ingress","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/haproxy-ingress"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"helm","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/helm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"helm-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/helm-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"helm-4","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/helm-4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"istio-pilot-agent-1.18","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/istio-pilot-agent-1.18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"istio-pilot-discovery-1.19","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/istio-pilot-discovery-1.19"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"k8sgpt","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/k8sgpt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"kargo","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kargo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"keda","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/keda"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"keda-2.10","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/keda-2.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"kubeflow-pipelines","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-pipelines"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"kubernetes-csi-external-provisioner","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubernetes-csi-external-provisioner"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"kubernetes-csi-external-resizer","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubernetes-csi-external-resizer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"kubevela","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubevela"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}},{"package":{"name":"metrics-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/metrics-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5hwq-fqv8-3gwc.json"}}],"schema_version":"1.7.5"}