{"id":"CGA-7wmq-v4gf-c3v4","modified":"2026-07-17T20:11:58.118131597Z","published":"2026-04-27T20:16:22.334068Z","withdrawn":"2026-07-17T20:11:58.118131478Z","related":["CVE-2026-40490","GHSA-cmxv-58fp-fm3g"],"affected":[{"package":{"name":"apache-pulsar-4.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-r13"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7wmq-v4gf-c3v4.json"}},{"package":{"name":"apache-pulsar-4.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7wmq-v4gf-c3v4.json"}},{"package":{"name":"apache-pulsar-fips-4.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-fips-4.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7wmq-v4gf-c3v4.json"}},{"package":{"name":"apache-pulsar-fips-4.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apache-pulsar-fips-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7wmq-v4gf-c3v4.json"}},{"package":{"name":"druid","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"36.0.0-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7wmq-v4gf-c3v4.json"}},{"package":{"name":"pinot","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pinot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7wmq-v4gf-c3v4.json"}},{"package":{"name":"pinot-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pinot-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7wmq-v4gf-c3v4.json"}},{"package":{"name":"tez","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tez"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.5-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7wmq-v4gf-c3v4.json"}},{"package":{"name":"apache-pulsar-4.2","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apache-pulsar-4.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7wmq-v4gf-c3v4.json"}},{"package":{"name":"druid","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"36.0.0-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7wmq-v4gf-c3v4.json"}},{"package":{"name":"tez","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tez"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.5-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-7wmq-v4gf-c3v4.json"}}],"schema_version":"1.7.5"}