{"id":"CGA-xx5r-cxh4-797p","modified":"2026-07-17T20:13:23.588586999Z","published":"2026-01-15T04:00:36.621713Z","withdrawn":"2026-07-17T20:13:23.588586859Z","related":["CVE-2025-27516","GHSA-cpwx-vrp4-4pq7"],"affected":[{"package":{"name":"checkov","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/checkov"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.432-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"grafana-oncall","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/grafana-oncall"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"grafana-oncall-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/grafana-oncall-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"jupyter-base-notebook","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jupyter-base-notebook"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"nemo","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/nemo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.10-torchvision-cuda-12.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-torchvision-cuda-12.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.10-vllm-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-vllm-cuda-11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.10-vllm-cuda-12.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-vllm-cuda-12.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.10-wheels-torchvision-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-wheels-torchvision-cuda-11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.10-wheels-torchvision-cuda-12.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-wheels-torchvision-cuda-12.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.10-wheels-vllm-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-wheels-vllm-cuda-11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.11-torchaudio-cuda-12.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-torchaudio-cuda-12.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.11-torchvision-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-torchvision-cuda-11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.11-torchvision-cuda-12.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-torchvision-cuda-12.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.11-wheels-torchaudio-cuda-12.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-wheels-torchaudio-cuda-12.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.11-wheels-torchvision-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-wheels-torchvision-cuda-11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.11-wheels-torchvision-cuda-12.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.11-wheels-torchvision-cuda-12.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.12-torchvision-cuda-12.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-torchvision-cuda-12.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.12-wheels-torchvision-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-wheels-torchvision-cuda-11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.12-wheels-torchvision-cuda-12.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.12-wheels-torchvision-cuda-12.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.9-torchvision-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.9-torchvision-cuda-11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.9-torchvision-cuda-12.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.9-torchvision-cuda-12.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.9-wheels-torchvision-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.9-wheels-torchvision-cuda-11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"py3.9-wheels-torchvision-cuda-12.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.9-wheels-torchvision-cuda-12.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"reflex","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/reflex"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"tensorflow-cpu-jupyter","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tensorflow-cpu-jupyter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"tensorflow-gpu-jupyter-2.18","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tensorflow-gpu-jupyter-2.18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"text-generation-inference","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/text-generation-inference"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.6-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"text-generation-inference-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/text-generation-inference-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.6-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"checkov","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/checkov"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.432-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"grafana-oncall","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/grafana-oncall"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"grafana-oncall-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/grafana-oncall-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"jupyter-base-notebook","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/jupyter-base-notebook"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"reflex","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/reflex"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}},{"package":{"name":"tensorflow-cpu-jupyter","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tensorflow-cpu-jupyter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xx5r-cxh4-797p.json"}}],"schema_version":"1.7.5"}