{"id":"CGA-jrq5-h6h9-mx39","modified":"2026-07-17T19:08:01.030363494Z","published":"2025-10-30T21:51:02Z","upstream":["GHSA-2c7c-3mj9-8fqh","GO-2023-2334"],"affected":[{"package":{"name":"cosign-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/cosign-fips?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-r1"}]}],"ecosystem_specific":{"components":[{"architecture":"aarch64","component_name":"cosign-fips","component_version":"","component_type":"apk","component_location":"/.PKGINFO","component_purl":"pkg:apk/cosign-fips","latest_event_status":"fixed","latest_event_timestamp":"2024-02-14T19:18:17Z"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jrq5-h6h9-mx39.json"}}],"schema_version":"1.7.5"}