{"id":"CGA-5j23-p9gq-43r4","modified":"2026-07-17T20:11:35.336763867Z","published":"2026-03-12T02:03:57.163216Z","withdrawn":"2026-07-17T20:11:35.336763678Z","related":["CVE-2026-24281","GHSA-7xrh-hqfc-g7qr"],"affected":[{"package":{"name":"akhq","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/akhq"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"apache-activemq-artemis","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-activemq-artemis"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.53.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"apache-nifi","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-nifi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"apache-pulsar-4.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-4.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"apache-pulsar-fips-4.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-fips-4.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"kafka-3.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-3.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.1-r53"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"kafka-3.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kafka-3.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"kserve-modelmesh","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-modelmesh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-r26"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"seata-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/seata-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"solr","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/solr"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"spark-3.5-scala-2.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-3.5-scala-2.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.8-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"spark-3.5-scala-2.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-3.5-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.8-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"spark-4.0-scala-2.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-4.0-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"spark-4.1-scala-2.13","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-4.1-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"spark-fips-3.5-scala-2.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-fips-3.5-scala-2.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.4-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"spark-kubernetes-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-kubernetes-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"spark-kubernetes-operator-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spark-kubernetes-operator-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-thirdparty-libs-cc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.51.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"trino-plugin-kafka","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-kafka"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"480-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"trino-plugin-kafka-event-listener","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-kafka-event-listener"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"480-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"trino-plugin-pinot","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-pinot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"480-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"trino-plugin-ranger","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino-plugin-ranger"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"480-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"wso2is","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wso2is"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"zookeeper-3.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zookeeper-3.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"zookeeper-fips-3.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zookeeper-fips-3.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"akhq","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/akhq"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"apache-activemq-artemis","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-activemq-artemis"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.53.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"apache-nifi","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-nifi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"apache-pulsar-4.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-pulsar-4.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"kafka-3.8","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kafka-3.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.1-r53"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"kafka-3.9","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kafka-3.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"kserve-modelmesh","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-modelmesh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-r26"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"solr","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/solr"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"spark-3.5-scala-2.12","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/spark-3.5-scala-2.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.8-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"spark-3.5-scala-2.13","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/spark-3.5-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.8-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"spark-4.0-scala-2.13","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/spark-4.0-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"spark-4.1-scala-2.13","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/spark-4.1-scala-2.13"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-thirdparty-libs-cc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.51.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"trino-plugin-kafka","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-kafka"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"480-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"trino-plugin-kafka-event-listener","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-kafka-event-listener"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"480-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"trino-plugin-pinot","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-pinot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"480-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"trino-plugin-ranger","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino-plugin-ranger"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"480-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}},{"package":{"name":"zookeeper-3.9","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zookeeper-3.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-5j23-p9gq-43r4.json"}}],"schema_version":"1.7.5"}