{"id":"CGA-8784-5948-h3qw","modified":"2026-07-17T20:12:01.191679271Z","published":"2026-01-15T03:56:26.214430Z","withdrawn":"2026-07-17T20:12:01.191679125Z","related":["CVE-2024-47534","GHSA-4f8r-qqr9-fq8j","GO-2024-3166"],"affected":[{"package":{"name":"aactl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/aactl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.12-r37"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"apko","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/apko"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.20-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"chainctl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/chainctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.59-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"cosign","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cosign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"cosign-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cosign-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"docker-credential-cgr","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/docker-credential-cgr"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.59-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"falcoctl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/falcoctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"falcoctl-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/falcoctl-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"flux-source-controller","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-source-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"flux-source-controller-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/flux-source-controller-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"gh","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.83.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"gitsign","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitsign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kubescape","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubescape"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.18-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-fips-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-fips-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-init-container-1.12","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kyverno-init-container-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r22"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"melange","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/melange"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.32.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"neuvector-sigstore-interface","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/neuvector-sigstore-interface"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0_git20250629-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"neuvector-sigstore-interface-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/neuvector-sigstore-interface-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0_git20251020-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"policy-controller","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/policy-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"policy-controller-tester","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/policy-controller-tester"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"policy-controller-tester-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/policy-controller-tester-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"policy-controller-webhook","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/policy-controller-webhook"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rekor"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-backfill-index","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rekor-backfill-index"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-backfill-redis","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rekor-backfill-redis"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-cli","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rekor-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/rekor-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-fips-tuf-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-fips-tuf-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-tuf-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sigstore-scaffolding-tuf-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.26-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"slsa-verifier","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/slsa-verifier"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"spire-agent","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spire-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"spire-agent-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/spire-agent-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"tekton-chains","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-chains"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"tekton-chains-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-chains-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"tkn","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tkn"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.42.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"tkn-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tkn-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.42.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"trivy","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trivy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.67.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"trivy-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trivy-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.67.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"vexctl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vexctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"wolfictl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wolfictl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38.21-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"zarf","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zarf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.65.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"zot","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"aactl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/aactl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.12-r37"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"apko","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/apko"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.20-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"cosign","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/cosign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"cosign-fips","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/cosign-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"falcoctl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/falcoctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"flux-source-controller","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/flux-source-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"gh","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.83.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"gitsign","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitsign"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kubescape","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubescape"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.18-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"kyverno-init-container-1.12","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kyverno-init-container-1.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.7-r22"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"melange","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/melange"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.32.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"neuvector-sigstore-interface","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/neuvector-sigstore-interface"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0_git20250629-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"policy-controller","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/policy-controller"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"policy-controller-tester","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/policy-controller-tester"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"policy-controller-webhook","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/policy-controller-webhook"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rekor"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-backfill-index","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rekor-backfill-index"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-backfill-redis","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rekor-backfill-redis"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-cli","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rekor-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"rekor-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/rekor-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"sigstore-scaffolding-tuf-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sigstore-scaffolding-tuf-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.26-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"slsa-verifier","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/slsa-verifier"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"spire-agent","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/spire-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"tekton-chains","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-chains"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"tkn","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tkn"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.42.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"trivy","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trivy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.67.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"vexctl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vexctl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"wolfictl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/wolfictl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38.21-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"zarf","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zarf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.65.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}},{"package":{"name":"zot","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-8784-5948-h3qw.json"}}],"schema_version":"1.7.5"}