{"id":"CGA-rqj6-gq24-6567","modified":"2026-07-17T20:13:01.986293408Z","published":"2026-05-20T13:17:43Z","withdrawn":"2026-07-17T20:13:01.986293155Z","related":["CVE-2026-45149","GHSA-jxxr-4gwj-5jf2"],"affected":[{"package":{"name":"actions-runner","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/actions-runner"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.334.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"airflow-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"authentik-2026.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/authentik-2026.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.5.4-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"authentik-fips-2026.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/authentik-fips-2026.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.5.3-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"emscripten","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/emscripten"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.7-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"kibana-8.19","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.19"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.16-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"kibana-8.19-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.19-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.16-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"kibana-8.19-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8.19-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.16-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"kibana-9.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"kibana-9.2-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.2-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"kibana-9.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.5-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"kibana-9.3-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.3-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.5-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"kibana-9.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"kibana-9.4-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.4-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"langfuse-2-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-2-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r23"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"langfuse-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.175.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"langfuse-3-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.175.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"langfuse-fips-2-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-2-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"langfuse-fips-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.175.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"langfuse-fips-3-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.175.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"lerna","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/lerna"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.7-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"npm","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.15.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"opensearch-dashboards-3-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-anomaly-detection-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"opensearch-dashboards-3-fips-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-anomaly-detection-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"prism","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/prism"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.243.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"renovate","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/renovate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.170.15-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"tileserver-gl","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tileserver-gl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"tileserver-gl-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tileserver-gl-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"ts-patch","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ts-patch"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"vitess-22","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vitess-22"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.4-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"airflow-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/airflow-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"langfuse-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/langfuse-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.175.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"langfuse-3-worker","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/langfuse-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.175.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"lerna","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/lerna"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.7-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"npm","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.15.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"opensearch-dashboards-3-anomaly-detection-dashboards-plugin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-anomaly-detection-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"prism","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/prism"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.243.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"renovate","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/renovate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.170.15-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"tileserver-gl","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tileserver-gl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"ts-patch","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ts-patch"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}},{"package":{"name":"vitess-22","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vitess-22"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.4-r12"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-rqj6-gq24-6567.json"}}],"schema_version":"1.7.5"}