{"schemaVersion":3,"id":"CVE-2026-4660","aliases":["UBUNTU-CVE-2026-4660","DEBIAN-CVE-2026-4660","CGA-27cr-hfpf-p3ww","CGA-2822-cc4x-8rxf","CGA-2vqh-r2q7-mvjh","CGA-2wff-45ww-4qr6","CGA-3jvh-8gf5-whx5","CGA-4474-hmj2-5qpc","CGA-4722-pr47-pmfj","CGA-4grh-mxpm-438w","CGA-5vr9-3r8v-978j","CGA-6m7p-7wm5-h79c","CGA-6rmw-wfhv-87w5","CGA-724g-mx48-hh9v","CGA-7c6g-3p6h-45mv","CGA-7qph-c62g-5996","CGA-838p-6jxv-73g6","CGA-8g3w-mxf9-hq4p","CGA-9h68-74fw-j7vv","CGA-cqh4-p89q-w6fc","CGA-fh4r-fm6f-47ww","CGA-fvmj-96gg-4w4p","CGA-fw3w-7rrr-mwv3","CGA-g298-f6cw-482p","CGA-g9wp-hrq3-qv9p","CGA-j795-w9vm-8prh","CGA-jcqg-px88-qw93","CGA-jx8h-3jcf-rxpg","CGA-m6fr-2jfc-p8hj","CGA-mf2g-2wv3-fh3w","CGA-mhxc-8gg6-x4w8","CGA-p6m9-62g7-j683","CGA-ph6x-54m7-m577","CGA-pwfm-fvjc-gc54","CGA-px57-f686-889w","CGA-pxcc-hg89-28hh","CGA-r562-345x-cqf5","CGA-r666-qf5r-xxh3","CGA-r788-qcff-qhcp","CGA-rmcx-pmr7-h8qh","CGA-v427-cr5f-j9r7","CGA-v53v-xgxr-5q6m","CGA-v8cx-5q23-vrm8","CGA-vhm4-q2r5-59jq","CGA-vvqj-gc79-vx39","CGA-vwhr-h9f5-f8qj","CGA-wpch-2rj8-7f63","CGA-xg9x-2f3w-j337","CGA-xjj3-3834-wmcc","GHSA-92mm-2pjq-r785","GO-2026-5058","CGA-27xw-grpq-vxfw","CGA-2ppj-m69x-77fw","CGA-2r7f-vjc4-qf6r","CGA-348p-7p8h-wj7x","CGA-3cj7-7q3h-334q","CGA-3cxq-2r3r-6rjx","CGA-3q2r-4rv3-gxm9","CGA-3xx9-44f6-f8rm","CGA-446j-5p8j-pjj8","CGA-45wq-2q3r-7q7r","CGA-466w-f2qm-hpw7","CGA-46gj-f6fw-rm6q","CGA-4cwx-2v9w-7fg7","CGA-4qxv-2gg4-93cr","CGA-4r2g-vhf8-7h2c","CGA-4r57-j6mf-vf6p","CGA-4rfm-6q5q-qp2f","CGA-56gh-c777-g2fj","CGA-57jg-pxqx-7h3f","CGA-5c2w-h22w-c696","CGA-5fjg-vmr3-m495","CGA-66x8-96rq-8fhg","CGA-6949-c3mp-wc4m","CGA-6mjc-69hw-2322","CGA-6pr6-hvw2-pm34","CGA-72cx-24f6-969m","CGA-77mf-h4r8-x37j","CGA-786j-x2xg-349p","CGA-7gjr-9m6m-jhvh","CGA-7p58-6p75-xpfw","CGA-7v35-gpvp-37hf","CGA-7v3h-4v32-f3qv","CGA-7w8j-jcmp-pvr5","CGA-82j9-5x88-pg4x","CGA-834r-j44h-hfg7","CGA-838m-7wfv-5923","CGA-8486-qhq5-3mv4","CGA-87rc-gq6h-h8gx","CGA-89cc-p369-2cwc","CGA-8g34-96hv-cf75","CGA-8mc7-fmj8-g7pw","CGA-8r35-h67q-8348","CGA-99m5-h227-hjhq","CGA-9r6r-pfqf-557g","CGA-c2fh-g49g-w956","CGA-c4r3-r4x9-jj84","CGA-cg3h-xjfv-7wr5","CGA-cw7x-h8w3-gpw5","CGA-cxvv-fv77-8m34","CGA-f8fv-c4v3-f67c","CGA-fhq7-vh27-jxj2","CGA-fpv8-jhhh-g3jq","CGA-fpwx-r54m-5cxr","CGA-fwjj-5jv5-38j8","CGA-fx76-xwjr-m6xr","CGA-ggvq-9hxv-gf4f","CGA-gpg6-hfr8-pj47","CGA-grh4-rvcc-p96f","CGA-gwqp-qwgx-4j79","CGA-gxmr-3q2h-88qp","CGA-h3vv-3xqg-ccjx","CGA-h8x3-9mmx-3v43","CGA-hfm8-q952-8ch7","CGA-hwq4-96j8-3r6h","CGA-hx4w-w9w8-r5cc","CGA-hxvw-j798-rrhg","CGA-j573-22vj-w2qv","CGA-j72c-729j-3gx3","CGA-jj9g-24gq-r2gf","CGA-jvx9-x262-xj93","CGA-m37m-gc6f-25p2","CGA-m9xv-53xx-4r4h","CGA-mj2r-rw93-73q8","CGA-mq39-p2w3-95m7","CGA-mwxw-v3pj-qxm6","CGA-mx23-2j8p-7x7j","CGA-pc6q-fw47-937j","CGA-pq6p-g6c5-j2p6","CGA-q6fr-h225-h4q5","CGA-qcm4-jj2r-23r8","CGA-qg6g-xfx7-5785","CGA-qj7v-7848-4r63","CGA-qv62-96pv-wm2f","CGA-r3gj-94wg-pj48","CGA-rrfw-m43w-phq9","CGA-rv69-674g-hf3f","CGA-v2ww-mx98-28pm","CGA-v473-j6j7-4rfq","CGA-v6mj-9fhr-29mj","CGA-v9ww-p2qv-39m8","CGA-vp87-5h7r-52r6","CGA-wg2g-w853-h5rr","CGA-wgfx-pr4h-935w","CGA-wjc9-f287-wp7j","CGA-x434-2v6c-m78r","CGA-x66m-4x5w-7chj","CGA-xcjp-5v8j-w7qf","CGA-xfhg-qm5j-vj6x","CGA-xg9c-33p9-hhg6","CGA-xrw9-5hw3-9c75","CGA-xxw3-8x8h-hmvf"],"status":"published","duplicateOf":null,"title":null,"description":"HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This vulnerability, CVE-2026-4660, is fixed in go-getter v1.8.6. This vulnerability does not affect the go-getter/v2 branch and package.","dates":{"published":"2026-04-09T13:47:46.953Z","modified":"2026-07-15T00:50:08.124Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Go","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00548,"percentile":0.45033,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":-0.035000000000000045,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00583},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00583,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00583,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00583,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00583,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00583,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00583,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00583,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00583,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00583,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00583,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00548,"percentile":0.45033}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00583,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00583,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00583,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00548,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00548,"percentile":0.45033}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"},{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","description":"The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/22.html"}],"affected":[{"vendor":"chainguard","product":"cg","name":"cg","label":"cg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cg","purlType":"apk","versions":[{"text":"< 0.2.246-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.2.246-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"chainctl","name":"chainctl","label":"chainctl","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/chainctl","purlType":"apk","versions":[{"text":"< 0.2.248-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.2.248-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"chainctl-fips","name":"chainctl-fips","label":"chainctl-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/chainctl-fips","purlType":"apk","versions":[{"text":"< 0.2.247-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.2.247-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cloudbeat-8.17","name":"cloudbeat-8.17","label":"cloudbeat-8.17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cloudbeat-8.17","purlType":"apk","versions":[{"text":"< 8.17.10-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r14","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cloudbeat-8.18","name":"cloudbeat-8.18","label":"cloudbeat-8.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cloudbeat-8.18","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cloudbeat-8.19","name":"cloudbeat-8.19","label":"cloudbeat-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cloudbeat-8.19","purlType":"apk","versions":[{"text":"< 8.19.13-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.13-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cloudbeat-9.0","name":"cloudbeat-9.0","label":"cloudbeat-9.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cloudbeat-9.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cloudbeat-9.1","name":"cloudbeat-9.1","label":"cloudbeat-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cloudbeat-9.1","purlType":"apk","versions":[{"text":"< 9.1.10-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cloudbeat-9.2","name":"cloudbeat-9.2","label":"cloudbeat-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cloudbeat-9.2","purlType":"apk","versions":[{"text":"< 9.2.7-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.7-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cloudbeat-9.3","name":"cloudbeat-9.3","label":"cloudbeat-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cloudbeat-9.3","purlType":"apk","versions":[{"text":"< 9.3.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cloudbeat-fips-8.17","name":"cloudbeat-fips-8.17","label":"cloudbeat-fips-8.17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cloudbeat-fips-8.17","purlType":"apk","versions":[{"text":"< 8.17.10-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r33","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cloudbeat-fips-8.18","name":"cloudbeat-fips-8.18","label":"cloudbeat-fips-8.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cloudbeat-fips-8.18","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cloudbeat-fips-8.19","name":"cloudbeat-fips-8.19","label":"cloudbeat-fips-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cloudbeat-fips-8.19","purlType":"apk","versions":[{"text":"< 8.19.13-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.13-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cloudbeat-fips-9.0","name":"cloudbeat-fips-9.0","label":"cloudbeat-fips-9.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cloudbeat-fips-9.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cloudbeat-fips-9.1","name":"cloudbeat-fips-9.1","label":"cloudbeat-fips-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cloudbeat-fips-9.1","purlType":"apk","versions":[{"text":"< 9.1.10-r20","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r20","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cloudbeat-fips-9.2","name":"cloudbeat-fips-9.2","label":"cloudbeat-fips-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cloudbeat-fips-9.2","purlType":"apk","versions":[{"text":"< 9.2.8-r4","noFixRecorded":false,"fixedIn":null},{"text":"< 9.2.7-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r4 | < 9.2.7-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cloudbeat-fips-9.3","name":"cloudbeat-fips-9.3","label":"cloudbeat-fips-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cloudbeat-fips-9.3","purlType":"apk","versions":[{"text":"< 9.3.2-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.2-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conftest","name":"conftest","label":"conftest","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conftest","purlType":"apk","versions":[{"text":"< 0.68.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.68.2-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conftest-fips","name":"conftest-fips","label":"conftest-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conftest-fips","purlType":"apk","versions":[{"text":"< 0.68.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.68.2-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"crossplane-provider-terraform","name":"crossplane-provider-terraform","label":"crossplane-provider-terraform","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/crossplane-provider-terraform","purlType":"apk","versions":[{"text":"< 1.1.1-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.1-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"crossplane-provider-terraform-fips","name":"crossplane-provider-terraform-fips","label":"crossplane-provider-terraform-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/crossplane-provider-terraform-fips","purlType":"apk","versions":[{"text":"< 1.1.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.1-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grype","name":"grype","label":"grype","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grype","purlType":"apk","versions":[{"text":"< 0.111.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.111.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grype-db","name":"grype-db","label":"grype-db","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grype-db","purlType":"apk","versions":[{"text":"< 0.53.3-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.53.3-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grype-fips","name":"grype-fips","label":"grype-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grype-fips","purlType":"apk","versions":[{"text":"< 0.112.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.112.0-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k9s","name":"k9s","label":"k9s","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k9s","purlType":"apk","versions":[{"text":"< 0.50.18-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.50.18-r18","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k9s-fips","name":"k9s-fips","label":"k9s-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k9s-fips","purlType":"apk","versions":[{"text":"< 0.50.18-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.50.18-r14","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kots","name":"kots","label":"kots","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kots","purlType":"apk","versions":[{"text":"< 1.130.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.130.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubescape","name":"kubescape","label":"kubescape","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubescape","purlType":"apk","versions":[{"text":"< 4.0.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubescape-server","name":"kubescape-server","label":"kubescape-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubescape-server","purlType":"apk","versions":[{"text":"< 4.0.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubescape-server-downloader","name":"kubescape-server-downloader","label":"kubescape-server-downloader","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubescape-server-downloader","purlType":"apk","versions":[{"text":"< 4.0.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubescape-server-fips","name":"kubescape-server-fips","label":"kubescape-server-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubescape-server-fips","purlType":"apk","versions":[{"text":"< 4.0.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubescape-server-fips-downloader","name":"kubescape-server-fips-downloader","label":"kubescape-server-fips-downloader","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubescape-server-fips-downloader","purlType":"apk","versions":[{"text":"< 4.0.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opentofu-1.10","name":"opentofu-1.10","label":"opentofu-1.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opentofu-1.10","purlType":"apk","versions":[{"text":"< 1.10.10-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.10.10-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opentofu-1.11","name":"opentofu-1.11","label":"opentofu-1.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opentofu-1.11","purlType":"apk","versions":[{"text":"< 1.11.6-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.11.6-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opentofu-1.8","name":"opentofu-1.8","label":"opentofu-1.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opentofu-1.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opentofu-1.9","name":"opentofu-1.9","label":"opentofu-1.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opentofu-1.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opentofu-fips-1.10","name":"opentofu-fips-1.10","label":"opentofu-fips-1.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opentofu-fips-1.10","purlType":"apk","versions":[{"text":"< 1.10.9-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.10.9-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opentofu-fips-1.11","name":"opentofu-fips-1.11","label":"opentofu-fips-1.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opentofu-fips-1.11","purlType":"apk","versions":[{"text":"< 1.11.8-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.11.8-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opentofu-fips-1.8","name":"opentofu-fips-1.8","label":"opentofu-fips-1.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opentofu-fips-1.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opentofu-fips-1.9","name":"opentofu-fips-1.9","label":"opentofu-fips-1.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opentofu-fips-1.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"packer","name":"packer","label":"packer","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/packer","purlType":"apk","versions":[{"text":"< 1.15.3-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.3-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"packer-fips","name":"packer-fips","label":"packer-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/packer-fips","purlType":"apk","versions":[{"text":"< 1.15.3-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.3-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"snyk-cli","name":"snyk-cli","label":"snyk-cli","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/snyk-cli","purlType":"apk","versions":[{"text":"< 1.1304.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1304.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"steampipe","name":"steampipe","label":"steampipe","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/steampipe","purlType":"apk","versions":[{"text":"< 2.4.1-r2","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.1-r2 | < 2.4.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"syft","name":"syft","label":"syft","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/syft","purlType":"apk","versions":[{"text":"< 1.42.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.42.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"syft-fips","name":"syft-fips","label":"syft-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/syft-fips","purlType":"apk","versions":[{"text":"< 1.42.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.42.4-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"task","name":"task","label":"task","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/task","purlType":"apk","versions":[{"text":"< 3.50.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.50.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"task-fips","name":"task-fips","label":"task-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/task-fips","purlType":"apk","versions":[{"text":"< 3.50.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.50.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"terraform","name":"terraform","label":"terraform","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/terraform","purlType":"apk","versions":[{"text":"< 1.5.7-r47","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.7-r47","eol":null,"hubHref":null},{"vendor":"chainguard","product":"terraform-1.10","name":"terraform-1.10","label":"terraform-1.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/terraform-1.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"terraform-1.11","name":"terraform-1.11","label":"terraform-1.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/terraform-1.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"terraform-1.12","name":"terraform-1.12","label":"terraform-1.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/terraform-1.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"terraform-1.13","name":"terraform-1.13","label":"terraform-1.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/terraform-1.13","purlType":"apk","versions":[{"text":"< 1.13.5-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.5-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"terraform-1.14","name":"terraform-1.14","label":"terraform-1.14","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/terraform-1.14","purlType":"apk","versions":[{"text":"< 1.14.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.14.9-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"terraform-1.9","name":"terraform-1.9","label":"terraform-1.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/terraform-1.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"terraform-fips-1.12","name":"terraform-fips-1.12","label":"terraform-fips-1.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/terraform-fips-1.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"terraform-fips-1.13","name":"terraform-fips-1.13","label":"terraform-fips-1.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/terraform-fips-1.13","purlType":"apk","versions":[{"text":"< 1.13.5-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.5-r18","eol":null,"hubHref":null},{"vendor":"chainguard","product":"terraform-fips-1.14","name":"terraform-fips-1.14","label":"terraform-fips-1.14","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/terraform-fips-1.14","purlType":"apk","versions":[{"text":"< 1.14.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.14.9-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"terragrunt","name":"terragrunt","label":"terragrunt","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/terragrunt","purlType":"apk","versions":[{"text":"< 1.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"terragrunt-fips","name":"terragrunt-fips","label":"terragrunt-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/terragrunt-fips","purlType":"apk","versions":[{"text":"< 1.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tflint","name":"tflint","label":"tflint","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tflint","purlType":"apk","versions":[{"text":"< 0.62.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.62.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tflint-fips","name":"tflint-fips","label":"tflint-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tflint-fips","purlType":"apk","versions":[{"text":"< 0.62.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.62.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tfsec","name":"tfsec","label":"tfsec","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tfsec","purlType":"apk","versions":[{"text":"< 1.28.14-r35","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.28.14-r35","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trivy","name":"trivy","label":"trivy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trivy","purlType":"apk","versions":[{"text":"< 0.69.3-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.69.3-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trivy-fips","name":"trivy-fips","label":"trivy-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trivy-fips","purlType":"apk","versions":[{"text":"< 0.69.3-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.69.3-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trivy-operator","name":"trivy-operator","label":"trivy-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trivy-operator","purlType":"apk","versions":[{"text":"< 0.30.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.30.1-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trivy-operator-fips","name":"trivy-operator-fips","label":"trivy-operator-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trivy-operator-fips","purlType":"apk","versions":[{"text":"< 0.30.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.30.1-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wolfictl","name":"wolfictl","label":"wolfictl","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wolfictl","purlType":"apk","versions":[{"text":"< 0.39.10-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.39.10-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"xeol","name":"xeol","label":"xeol","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/xeol","purlType":"apk","versions":[{"text":"< 0.10.8-r34","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.8-r34","eol":null,"hubHref":null},{"vendor":"chainguard","product":"xeol-fips","name":"xeol-fips","label":"xeol-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/xeol-fips","purlType":"apk","versions":[{"text":"< 0.10.8-r32","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.8-r32","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zarf","name":"zarf","label":"zarf","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zarf","purlType":"apk","versions":[{"text":"< 0.77.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.77.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zarf-fips","name":"zarf-fips","label":"zarf-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zarf-fips","purlType":"apk","versions":[{"text":"< 0.74.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.74.2-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zot","name":"zot","label":"zot","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zot","purlType":"apk","versions":[{"text":"< 2.1.15-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.15-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"conftest","name":"conftest","label":"conftest","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/conftest","purlType":"apk","versions":[{"text":"< 0.68.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.68.2-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"grype","name":"grype","label":"grype","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/grype","purlType":"apk","versions":[{"text":"< 0.111.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.111.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k9s","name":"k9s","label":"k9s","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k9s","purlType":"apk","versions":[{"text":"< 0.50.18-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.50.18-r18","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kots","name":"kots","label":"kots","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kots","purlType":"apk","versions":[{"text":"< 1.130.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.130.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubescape","name":"kubescape","label":"kubescape","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubescape","purlType":"apk","versions":[{"text":"< 4.0.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.5-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opentofu-1.10","name":"opentofu-1.10","label":"opentofu-1.10","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opentofu-1.10","purlType":"apk","versions":[{"text":"< 1.10.10-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.10.10-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opentofu-1.11","name":"opentofu-1.11","label":"opentofu-1.11","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opentofu-1.11","purlType":"apk","versions":[{"text":"< 1.11.6-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.11.6-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opentofu-1.9","name":"opentofu-1.9","label":"opentofu-1.9","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opentofu-1.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"snyk-cli","name":"snyk-cli","label":"snyk-cli","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/snyk-cli","purlType":"apk","versions":[{"text":"< 1.1304.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1304.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"steampipe","name":"steampipe","label":"steampipe","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/steampipe","purlType":"apk","versions":[{"text":"< 2.4.1-r2","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.1-r2 | < 2.4.4-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"syft","name":"syft","label":"syft","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/syft","purlType":"apk","versions":[{"text":"< 1.42.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.42.4-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"task","name":"task","label":"task","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/task","purlType":"apk","versions":[{"text":"< 3.50.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.50.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"terraform","name":"terraform","label":"terraform","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/terraform","purlType":"apk","versions":[{"text":"< 1.5.7-r47","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.7-r47","eol":null,"hubHref":null},{"vendor":"wolfi","product":"terragrunt","name":"terragrunt","label":"terragrunt","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/terragrunt","purlType":"apk","versions":[{"text":"< 1.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tflint","name":"tflint","label":"tflint","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tflint","purlType":"apk","versions":[{"text":"< 0.62.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.62.1-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tfsec","name":"tfsec","label":"tfsec","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tfsec","purlType":"apk","versions":[{"text":"< 1.28.14-r35","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.28.14-r35","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trivy","name":"trivy","label":"trivy","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trivy","purlType":"apk","versions":[{"text":"< 0.69.3-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.69.3-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trivy-operator","name":"trivy-operator","label":"trivy-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trivy-operator","purlType":"apk","versions":[{"text":"< 0.30.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.30.1-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"wolfictl","name":"wolfictl","label":"wolfictl","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/wolfictl","purlType":"apk","versions":[{"text":"< 0.39.10-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.39.10-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"xeol","name":"xeol","label":"xeol","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/xeol","purlType":"apk","versions":[{"text":"< 0.10.8-r34","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.8-r34","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zarf","name":"zarf","label":"zarf","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zarf","purlType":"apk","versions":[{"text":"< 0.77.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.77.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zot","name":"zot","label":"zot","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zot","purlType":"apk","versions":[{"text":"< 2.1.15-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.15-r12","eol":null,"hubHref":null},{"vendor":"debian","product":"golang-github-hashicorp-go-getter","name":"golang-github-hashicorp-go-getter","label":"golang-github-hashicorp-go-getter","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/golang-github-hashicorp-go-getter","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-github-hashicorp-go-getter","name":"golang-github-hashicorp-go-getter","label":"golang-github-hashicorp-go-getter","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-github-hashicorp-go-getter","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"github.com/hashicorp","product":"go-getter","name":"github.com/hashicorp/go-getter","label":"go-getter","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/github.com/hashicorp/go-getter","purlType":"golang","versions":[{"text":"< 1.8.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.6","eol":null,"hubHref":null},{"vendor":"hashicorp","product":"tooling","name":"Tooling","label":"tooling","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.8.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.6","eol":null,"hubHref":"/vendor/hashicorp/tooling"}],"affectedCount":99,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://discuss.hashicorp.com/t/hcsec-2026-04-go-getter-may-allow-to-arbitrary-filesystem-reads-through-git-operations/77311","label":"discuss.hashicorp.com/t/…","hostname":"discuss.hashicorp.com","tags":["REPORT","WEB"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4660","label":"access.redhat.com/security/cve/CVE-2026-4660","hostname":"access.redhat.com","tags":["VDB Entry","X Refsource REDHAT","Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456909","label":"bugzilla.redhat.com/show_bug.cgi?id=2456909","hostname":"bugzilla.redhat.com","tags":["Issue Tracking","X Refsource REDHAT","REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4660.json","label":"security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4660.json","hostname":"security.access.redhat.com","tags":["X Sadp Csaf Vex","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:24478","label":"access.redhat.com/errata/RHSA-2026:24478","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-4660","label":"ubuntu.com/security/CVE-2026-4660","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4660","label":"www.cve.org/CVERecord?id=CVE-2026-4660","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-4660","label":"security-tracker.debian.org/tracker/CVE-2026-4660","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4660.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4660.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4660","label":"nvd.nist.gov/vuln/detail/CVE-2026-4660","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/hashicorp/go-getter","label":"github.com/hashicorp/go-getter","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/advisories/GHSA-92mm-2pjq-r785","label":"github.com/advisories/GHSA-92mm-2pjq-r785","hostname":"github.com","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:21483-1"],"duplicates":[],"related":["CGA-HJR7-VXF9-RGPC","OPENSUSE-SU-2026:21483-1"]},"timeline":[{"kind":"published","date":"2026-04-09T13:47:46.953Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-15T00:50:08.124Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T16:02:31.974Z","stale":false,"partial":false}}