{"id":"CGA-xxfp-w86f-6cgf","modified":"2026-07-31T08:14:25.451245984Z","published":"2025-11-04T04:37:22Z","withdrawn":"2026-07-31T08:14:25.451245860Z","upstream":["CVE-2020-2774","GHSA-9mq5-gmx4-79cq"],"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/77REFDB7DE4WNKQIRGZTF53RFBQOXQLC/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SDGBQYS3A36S4CAZPV5YROHYXYZR6LAH/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TSVLI36TYRTPQGCS24VZQUXCUFOUW4VQ/"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202105-27"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20200416-0003/"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpuapr2020.html"}],"affected":[{"package":{"name":"mysql-8.0-bitnami-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mysql-8.0-bitnami-compat?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.38-r0"}]}],"ecosystem_specific":{"components":[{"component_version":"8.0","component_type":"binary","component_location":"/usr/bin/mysql","component_purl":"","latest_event_status":"fixed","latest_event_timestamp":"2024-07-04T21:26:27Z","architecture":"x86_64","component_name":"mysql"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xxfp-w86f-6cgf.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"}]}