{"id":"CGA-q6xf-fxqh-w43g","modified":"2026-07-17T20:12:57.931568781Z","published":"2026-01-15T03:58:52.660389Z","withdrawn":"2026-07-17T20:12:57.931568640Z","related":["CVE-2025-8916","GHSA-4cx2-fc23-5wg6"],"affected":[{"package":{"name":"camunda-zeebe-8.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.22-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"camunda-zeebe-8.3-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.3-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.22-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"camunda-zeebe-8.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.21-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"camunda-zeebe-8.4-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.4-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.21-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"camunda-zeebe-8.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"camunda-zeebe-8.5-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.5-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.25-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"camunda-zeebe-8.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.6.29-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"camunda-zeebe-8.6-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.6-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.6.29-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"camunda-zeebe-8.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7.16-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"camunda-zeebe-8.7-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/camunda-zeebe-8.7-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7.16-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"druid","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"34.0.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"druid-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/druid-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"34.0.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"elasticsearch-7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.29-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"elasticsearch-7-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-7-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.29-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"elasticsearch-7-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-7-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.29-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"elasticsearch-8.17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-8.17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r20"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"elasticsearch-fips-8.17","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-fips-8.17"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"elasticsearch-fips-8.17-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-fips-8.17-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"elasticsearch-fips-8.17-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/elasticsearch-fips-8.17-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.17.10-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"jenkins-2.462","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jenkins-2.462"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.462.3-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"kayenta-2025.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kayenta-2025.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.0.8-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"kayenta-2025.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kayenta-2025.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.1.5-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"kayenta-fips-2025.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kayenta-fips-2025.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.0.8-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"kayenta-fips-2025.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kayenta-fips-2025.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.1.5-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"keycloak-operator","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.3.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"keycloak-operator-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/keycloak-operator-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.3.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"kserve-modelmesh","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-modelmesh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"kserve-modelmesh-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kserve-modelmesh-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"neo4j-4.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/neo4j-4.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.44-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"neo4j-4.4-docker-publish","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/neo4j-4.4-docker-publish"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.44-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"opensearch-2-performance-analyzer","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-performance-analyzer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"opensearch-2-security","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-2-security"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.4-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"pinot","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pinot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"pinot-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pinot-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"thingsboard","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"thingsboard-tb-js-executor","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard-tb-js-executor"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"thingsboard-tb-mqtt-transport","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard-tb-mqtt-transport"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"thingsboard-tb-node","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard-tb-node"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"thingsboard-tb-web-ui","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/thingsboard-tb-web-ui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"zipkin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zipkin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"zipkin-oci-entrypoint","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zipkin-oci-entrypoint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"zipkin-slim","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/zipkin-slim"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"druid","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/druid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"34.0.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"druid-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/druid-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"34.0.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"keycloak-operator","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/keycloak-operator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.3.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"keycloak-operator-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/keycloak-operator-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.3.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"kserve-modelmesh","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-modelmesh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"kserve-modelmesh-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kserve-modelmesh-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"thingsboard","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/thingsboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"thingsboard-tb-js-executor","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/thingsboard-tb-js-executor"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"thingsboard-tb-mqtt-transport","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/thingsboard-tb-mqtt-transport"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"thingsboard-tb-node","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/thingsboard-tb-node"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"thingsboard-tb-web-ui","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/thingsboard-tb-web-ui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"zipkin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zipkin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"zipkin-oci-entrypoint","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zipkin-oci-entrypoint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}},{"package":{"name":"zipkin-slim","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/zipkin-slim"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-q6xf-fxqh-w43g.json"}}],"schema_version":"1.7.5"}