{"schemaVersion":3,"id":"CVE-2026-49265","aliases":["GHSA-xpv3-w29h-x7cv","PYSEC-2026-4114","CGA-2fx9-2vh4-xqvf","CGA-2r82-rch9-fjq2","CGA-382r-mpjv-448f","CGA-389c-phx3-4r7h","CGA-42ch-3xgq-3v2q","CGA-4jp8-876m-cg58","CGA-55j5-j9px-77qh","CGA-55w5-jfr2-3mfv","CGA-5xw4-qwwc-mq6c","CGA-64fq-4856-rh4f","CGA-6gpx-g269-hpw9","CGA-6vrg-pm8w-8j93","CGA-6x7m-xh36-3v6v","CGA-6xgj-8fm9-g4x9","CGA-77vf-8m69-xvhm","CGA-7f96-x7wc-gqqg","CGA-8hw2-66r4-9rjg","CGA-96m8-qmvr-36m9","CGA-9wx7-239h-wcx7","CGA-c54c-9cp2-r95h","CGA-cqgx-76q8-qxp4","CGA-f99w-m8fw-xg85","CGA-gqw4-78xm-2594","CGA-h7pc-5mg2-wgh3","CGA-hmwg-cp4h-rx84","CGA-hpfp-698g-qv3j","CGA-j45g-cjh9-g69c","CGA-m8v2-mrw6-mqfj","CGA-p6pj-qx4h-w7xq","CGA-r3wr-v24v-5w6w","CGA-rpq9-vp45-r5fx","CGA-vp5c-qw29-3wjx","CGA-wc9m-c6v5-qqf8","CGA-x3w5-g6xw-gppr","CGA-2m49-498r-rmqg","CGA-2rwx-6w9w-p4r3","CGA-2w44-gcc9-g7qp","CGA-2wwq-c976-jqr3","CGA-2x3c-6xj9-8q67","CGA-354r-2q97-hx3p","CGA-36pv-r9mp-rjjh","CGA-3jvm-pmjm-2698","CGA-3vq5-px4c-4g8q","CGA-422w-x95c-xh94","CGA-42mp-272m-g66p","CGA-4943-vx8w-5fhx","CGA-4fg5-hcgg-8c7r","CGA-4h64-w93c-j3m3","CGA-4h6v-w33m-9qvf","CGA-4q6h-939g-x255","CGA-5333-835v-5v8j","CGA-5h6f-mpc8-45fp","CGA-5j26-j3c8-h9q2","CGA-5q35-m28p-c27f","CGA-6ghc-r6rp-prr6","CGA-6hcm-q683-5w9x","CGA-6vf2-rp4r-pvwh","CGA-73mm-34pj-xvv8","CGA-79xp-8f2c-7x5w","CGA-7fg9-wxhc-mg7j","CGA-7m2r-cwq9-5f77","CGA-83f2-fjvw-h7ww","CGA-87gp-7wqp-xjrx","CGA-8c64-7c2g-fm2p","CGA-8rmg-j7gr-978m","CGA-8v2x-gwq6-vrmg","CGA-93r5-3j2j-pvc8","CGA-95gx-qjpg-6r87","CGA-95rq-c459-5frm","CGA-9664-q6g2-96r2","CGA-9grq-fqcp-f8x9","CGA-9hr6-q6vp-7745","CGA-9p6f-fvxw-5w62","CGA-c2hm-rm7q-pj26","CGA-c4c9-x3gc-q692","CGA-c6jg-h8wx-45qq","CGA-cfh7-w4vf-2jv7","CGA-cgcf-gwxq-37c3","CGA-cgwr-vc2c-28rj","CGA-cp9c-mgch-xrq4","CGA-f53r-5r59-c935","CGA-f69f-wg9v-v7c7","CGA-f7vp-59v8-9jf6","CGA-f98w-6h5p-rx9m","CGA-f9p5-57f3-rp78","CGA-fmfq-x2rj-6m95","CGA-frjh-7x7w-86g6","CGA-frxp-35fc-5864","CGA-fv22-xmj6-7pjp","CGA-fx7x-27hx-rjxr","CGA-g3fw-r29p-m3rg","CGA-g3xf-9hg2-v2pj","CGA-gcfq-h8xx-8hv7","CGA-gf9m-j3pj-rwpg","CGA-h292-mm5f-mp6q","CGA-h6pr-4h82-2mq4","CGA-hhcm-xp75-m4pg","CGA-hm9p-9j97-h232","CGA-hmpm-6286-gjjh","CGA-hpc9-m8fw-88vc","CGA-hr5q-jmg8-5639","CGA-hv49-hwj5-3jw8","CGA-j7x4-p7qw-h764","CGA-jfw5-3gwj-9wg7","CGA-jrpq-3xr5-wqwc","CGA-m33x-3gmj-c85p","CGA-m3r2-r7h6-37qv","CGA-m75h-hmwf-g538","CGA-mc3w-cwrc-f835","CGA-mgpc-rpq9-c5vh","CGA-mj72-92g7-7552","CGA-mjq9-2fw7-hm8r","CGA-mqg3-9vm4-fv4j","CGA-mrx7-942v-cjgr","CGA-p85p-9xxm-897g","CGA-p87c-m8ph-mw2m","CGA-p9gp-m25v-c5q8","CGA-phqg-5r27-mv4g","CGA-pjrh-w26q-rr9r","CGA-pr2w-m843-gc7r","CGA-pv8r-j5xr-v8qx","CGA-pwvm-rqg4-2chg","CGA-pxgc-vwq5-p42h","CGA-q2jv-2635-4qfh","CGA-q5wj-pvhf-w9qp","CGA-q64j-rvpx-5fm5","CGA-q79c-pfrg-xqw2","CGA-q8cv-v62f-34pp","CGA-q937-6m2p-6p76","CGA-q9c2-fx4p-35q3","CGA-qg78-cpfm-g67g","CGA-qqgx-wghq-v2fh","CGA-qr2v-w673-vgpp","CGA-r364-pm56-ggv5","CGA-r3vr-pmf2-hfq3","CGA-r6qg-ghxp-3r6g","CGA-rf56-xgxf-mmcp","CGA-rm6g-4fj8-9xwv","CGA-rrgf-pchj-7jpp","CGA-v8v8-wrw3-44h3","CGA-vffh-76hj-w7r6","CGA-vq38-mf97-ppjr","CGA-vqx7-rx88-mxwp","CGA-vr7h-fw8r-rwx7","CGA-vrxq-8268-cm39","CGA-w248-p35v-gwh4","CGA-w2px-qcq4-fmjc","CGA-w575-v5g6-cfgx","CGA-w5fh-gwjj-vp83","CGA-w6q5-c9m4-6q56","CGA-wgpm-vwmm-vx8h","CGA-whf2-g987-xj5p","CGA-wrcf-9php-hvvf","CGA-wrf5-j856-g3c5","CGA-wv2m-w828-p3m6","CGA-x24r-rqvr-g5xq","CGA-x46c-f5mv-38r9","CGA-x4h3-9xxf-7jv4","CGA-xg4c-7mwr-4cm6","CGA-xq89-f5vc-8774","CGA-xv59-gcjf-j8fq","DEBIAN-CVE-2026-49265","UBUNTU-CVE-2026-49265"],"status":"published","duplicateOf":null,"title":null,"description":"OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.0.0 until 4.0.0, OAuthLib's PKCE checks in oauthlib/oauth2/rfc6749/grant_types/authorization_code.py compare attacker-supplied code_verifier values with stored challenges using ordinary string equality in code_challenge_method_plain and code_challenge_method_s256. Because the comparison can return after a length difference or the first mismatching character, repeated token endpoint measurements can reveal common-prefix timing information that could potentially allow recovery of the code_verifier, unauthorized access-token acquisition, and account takeover. Practical exploitation requires an intercepted, single-use authorization code and enough measurements to overcome real-world network noise; the local timing benchmark does not establish practical remote account takeover, so the weakness remains a defense-in-depth concern. This issue is fixed in version 4.0.0.","dates":{"published":"2026-10-13T15:47:11.854Z","modified":"2026-10-13T16:19:39.092Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.8,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Pypi","score":6.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","exploitability":4.1,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":6.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","exploitability":4.1,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":6.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","exploitability":4.1,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":6.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","exploitability":4.1,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":6.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","exploitability":4.1,"impact":8.7,"computed":true}]},"epss":{"probability":0.00375,"percentile":0.29957,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-14T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00375,"percentile":0.29957}],"last30":[{"date":"2026-10-14T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00375,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00375,"percentile":0.29957}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-208","name":"Observable Timing Discrepancy","description":"Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/208.html"}],"affected":[{"vendor":"chainguard","product":"airflow-2","name":"airflow-2","label":"airflow-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ansible-operator","name":"ansible-operator","label":"ansible-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ansible-operator","purlType":"apk","versions":[{"text":"< 1.42.3-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.42.3-r18","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ansible-operator-fips","name":"ansible-operator-fips","label":"ansible-operator-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ansible-operator-fips","purlType":"apk","versions":[{"text":"< 1.42.3-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.42.3-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"authentik-2025.12","name":"authentik-2025.12","label":"authentik-2025.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/authentik-2025.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"authentik-2026.2","name":"authentik-2026.2","label":"authentik-2026.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/authentik-2026.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"authentik-2026.5","name":"authentik-2026.5","label":"authentik-2026.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/authentik-2026.5","purlType":"apk","versions":[{"text":"< 2026.5.7-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.5.7-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"authentik-fips-2025.12","name":"authentik-fips-2025.12","label":"authentik-fips-2025.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/authentik-fips-2025.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"authentik-fips-2026.2","name":"authentik-fips-2026.2","label":"authentik-fips-2026.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/authentik-fips-2026.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"authentik-fips-2026.5","name":"authentik-fips-2026.5","label":"authentik-fips-2026.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/authentik-fips-2026.5","purlType":"apk","versions":[{"text":"< 2026.5.7-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.5.7-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"awx","name":"awx","label":"awx","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/awx","purlType":"apk","versions":[{"text":"< 24.6.1-r62","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.6.1-r62","eol":null,"hubHref":null},{"vendor":"chainguard","product":"az","name":"az","label":"az","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/az","purlType":"apk","versions":[{"text":"< 2.90.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.90.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"azureml-inference-server-http","name":"azureml-inference-server-http","label":"azureml-inference-server-http","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/azureml-inference-server-http","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"azureml-inference-server-http-fips","name":"azureml-inference-server-http-fips","label":"azureml-inference-server-http-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/azureml-inference-server-http-fips","purlType":"apk","versions":[{"text":"< 1.5.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.1-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"chroma","name":"chroma","label":"chroma","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/chroma","purlType":"apk","versions":[{"text":"< 1.5.9-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.9-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dagster","name":"dagster","label":"dagster","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dagster","purlType":"apk","versions":[{"text":"< 1.13.25-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.25-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dagster-fips","name":"dagster-fips","label":"dagster-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dagster-fips","purlType":"apk","versions":[{"text":"< 1.13.24-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.24-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dask-kubernetes","name":"dask-kubernetes","label":"dask-kubernetes","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dask-kubernetes","purlType":"apk","versions":[{"text":"< 2026.3.0-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.3.0-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dask-kubernetes-fips","name":"dask-kubernetes-fips","label":"dask-kubernetes-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dask-kubernetes-fips","purlType":"apk","versions":[{"text":"< 2026.3.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.3.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.77-core-integrations","name":"datadog-agent-7.77-core-integrations","label":"datadog-agent-7.77-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.78-core-integrations","name":"datadog-agent-7.78-core-integrations","label":"datadog-agent-7.78-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.78-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.79-core-integrations","name":"datadog-agent-7.79-core-integrations","label":"datadog-agent-7.79-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.80-core-integrations","name":"datadog-agent-7.80-core-integrations","label":"datadog-agent-7.80-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.80-core-integrations","purlType":"apk","versions":[{"text":"< 7.80.4-r20","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.80.4-r20","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.81-core-integrations","name":"datadog-agent-7.81-core-integrations","label":"datadog-agent-7.81-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations","purlType":"apk","versions":[{"text":"< 7.81.3-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.81.3-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.82-core-integrations","name":"datadog-agent-7.82-core-integrations","label":"datadog-agent-7.82-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.82-core-integrations","purlType":"apk","versions":[{"text":"< 7.82.3-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.82.3-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.83-core-integrations","name":"datadog-agent-7.83-core-integrations","label":"datadog-agent-7.83-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.83-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.84-core-integrations","name":"datadog-agent-7.84-core-integrations","label":"datadog-agent-7.84-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.84-core-integrations","purlType":"apk","versions":[{"text":"< 7.84.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.84.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.77-core-integrations","name":"datadog-agent-fips-7.77-core-integrations","label":"datadog-agent-fips-7.77-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.77-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.78-core-integrations","name":"datadog-agent-fips-7.78-core-integrations","label":"datadog-agent-fips-7.78-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.79-core-integrations","name":"datadog-agent-fips-7.79-core-integrations","label":"datadog-agent-fips-7.79-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.80-core-integrations","name":"datadog-agent-fips-7.80-core-integrations","label":"datadog-agent-fips-7.80-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.80-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.81-core-integrations","name":"datadog-agent-fips-7.81-core-integrations","label":"datadog-agent-fips-7.81-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.82-core-integrations","name":"datadog-agent-fips-7.82-core-integrations","label":"datadog-agent-fips-7.82-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.82-core-integrations","purlType":"apk","versions":[{"text":"< 7.82.3-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.82.3-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.83-core-integrations","name":"datadog-agent-fips-7.83-core-integrations","label":"datadog-agent-fips-7.83-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.83-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.84-core-integrations","name":"datadog-agent-fips-7.84-core-integrations","label":"datadog-agent-fips-7.84-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.84-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 7.84.2-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 7.84.2-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dbt-bigquery","name":"dbt-bigquery","label":"dbt-bigquery","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dbt-bigquery","purlType":"apk","versions":[{"text":"< 1.10.3-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.10.3-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ggshield","name":"ggshield","label":"ggshield","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ggshield","purlType":"apk","versions":[{"text":"< 1.55.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.55.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jupyter-base-notebook","name":"jupyter-base-notebook","label":"jupyter-base-notebook","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jupyter-base-notebook","purlType":"apk","versions":[{"text":"< 7.6.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jupyterhub-k8s-singleuser-sample","name":"jupyterhub-k8s-singleuser-sample","label":"jupyterhub-k8s-singleuser-sample","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample","purlType":"apk","versions":[{"text":"< 4.4.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k8s-sidecar","name":"k8s-sidecar","label":"k8s-sidecar","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k8s-sidecar","purlType":"apk","versions":[{"text":"< 2.11.2-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.11.2-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-earlystopping","name":"katib-earlystopping","label":"katib-earlystopping","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-earlystopping","purlType":"apk","versions":[{"text":"< 0.19.0-r42","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r42","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keep-api-fips","name":"keep-api-fips","label":"keep-api-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keep-api-fips","purlType":"apk","versions":[{"text":"< 0.54.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.54.3-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-huggingfaceserver-cuda-13.0","name":"kserve-huggingfaceserver-cuda-13.0","label":"kserve-huggingfaceserver-cuda-13.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-huggingfaceserver-cuda-13.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-huggingfaceserver-cuda-13.0-fips","name":"kserve-huggingfaceserver-cuda-13.0-fips","label":"kserve-huggingfaceserver-cuda-13.0-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-huggingfaceserver-cuda-13.0-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-huggingfaceserver-cuda-13.3","name":"kserve-huggingfaceserver-cuda-13.3","label":"kserve-huggingfaceserver-cuda-13.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-huggingfaceserver-cuda-13.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 0.21.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 0.21.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-lgbserver","name":"kserve-lgbserver","label":"kserve-lgbserver","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-lgbserver","purlType":"apk","versions":[{"text":"< 0.21.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.21.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-lgbserver-fips","name":"kserve-lgbserver-fips","label":"kserve-lgbserver-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-lgbserver-fips","purlType":"apk","versions":[{"text":"< 0.21.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.21.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-models-web-app","name":"kserve-models-web-app","label":"kserve-models-web-app","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-models-web-app","purlType":"apk","versions":[{"text":"< 1.0.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-pmmlserver","name":"kserve-pmmlserver","label":"kserve-pmmlserver","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-pmmlserver","purlType":"apk","versions":[{"text":"< 0.21.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.21.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-pmmlserver-fips","name":"kserve-pmmlserver-fips","label":"kserve-pmmlserver-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-pmmlserver-fips","purlType":"apk","versions":[{"text":"< 0.21.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.21.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-sklearnserver","name":"kserve-sklearnserver","label":"kserve-sklearnserver","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-sklearnserver","purlType":"apk","versions":[{"text":"< 0.21.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.21.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-storage-controller","name":"kserve-storage-controller","label":"kserve-storage-controller","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-storage-controller","purlType":"apk","versions":[{"text":"< 0.21.0-r1","noFixRecorded":false,"fixedIn":null},{"text":"< 0.21.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.21.0-r1 | < 0.21.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-xgbserver","name":"kserve-xgbserver","label":"kserve-xgbserver","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-xgbserver","purlType":"apk","versions":[{"text":"< 0.21.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.21.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-xgbserver-fips","name":"kserve-xgbserver-fips","label":"kserve-xgbserver-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-xgbserver-fips","purlType":"apk","versions":[{"text":"< 0.21.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.21.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-jupyter-web-app","name":"kubeflow-jupyter-web-app","label":"kubeflow-jupyter-web-app","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-jupyter-web-app","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-apiserver","name":"kubeflow-pipelines-apiserver","label":"kubeflow-pipelines-apiserver","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver","purlType":"apk","versions":[{"text":"< 2.17.2-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.2-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-apiserver-fips","name":"kubeflow-pipelines-apiserver-fips","label":"kubeflow-pipelines-apiserver-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver-fips","purlType":"apk","versions":[{"text":"< 2.17.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.2-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-visualization-server","name":"kubeflow-pipelines-visualization-server","label":"kubeflow-pipelines-visualization-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-visualization-server","purlType":"apk","versions":[{"text":"< 2.17.2-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.2-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-tensorboard-web-app","name":"kubeflow-tensorboard-web-app","label":"kubeflow-tensorboard-web-app","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-tensorboard-web-app","purlType":"apk","versions":[{"text":"< 1.10.0-r38","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.10.0-r38","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-volumes-web-app","name":"kubeflow-volumes-web-app","label":"kubeflow-volumes-web-app","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-volumes-web-app","purlType":"apk","versions":[{"text":"< 1.10.0-r26","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.10.0-r26","eol":null,"hubHref":null},{"vendor":"chainguard","product":"litellm","name":"litellm","label":"litellm","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/litellm","purlType":"apk","versions":[{"text":"< 1.103.1-r1","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 1.103.1-r1 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mcp-atlassian","name":"mcp-atlassian","label":"mcp-atlassian","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mcp-atlassian","purlType":"apk","versions":[{"text":"< 0.23.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.23.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"metaflow-service","name":"metaflow-service","label":"metaflow-service","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/metaflow-service","purlType":"apk","versions":[{"text":"< 2.6.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"metaflow-service-fips","name":"metaflow-service-fips","label":"metaflow-service-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/metaflow-service-fips","purlType":"apk","versions":[{"text":"< 2.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mlrun","name":"mlrun","label":"mlrun","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mlrun","purlType":"apk","versions":[{"text":"< 1.12.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.12.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mlrun-api","name":"mlrun-api","label":"mlrun-api","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mlrun-api","purlType":"apk","versions":[{"text":"< 1.12.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.12.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mlrun-api-fips","name":"mlrun-api-fips","label":"mlrun-api-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mlrun-api-fips","purlType":"apk","versions":[{"text":"< 1.12.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.12.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mlrun-fips","name":"mlrun-fips","label":"mlrun-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mlrun-fips","purlType":"apk","versions":[{"text":"< 1.12.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.12.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"open-webui","name":"open-webui","label":"open-webui","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/open-webui","purlType":"apk","versions":[{"text":"< 0.11.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.11.4-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-client-2026.1","name":"openstack-client-2026.1","label":"openstack-client-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-client-2026.1","purlType":"apk","versions":[{"text":"< 9.0.0_git20260520-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.0_git20260520-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-keystone-2025.1-fips","name":"openstack-keystone-2025.1-fips","label":"openstack-keystone-2025.1-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-keystone-2025.1-fips","purlType":"apk","versions":[{"text":"< 27.0.1_git20260910-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 27.0.1_git20260910-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-keystone-2025.2","name":"openstack-keystone-2025.2","label":"openstack-keystone-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-keystone-2025.2","purlType":"apk","versions":[{"text":"< 28.0.1_git20260902-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 28.0.1_git20260902-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-keystone-2025.2-fips","name":"openstack-keystone-2025.2-fips","label":"openstack-keystone-2025.2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-keystone-2025.2-fips","purlType":"apk","versions":[{"text":"< 28.0.1_git20260902-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 28.0.1_git20260902-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-keystone-2026.1","name":"openstack-keystone-2026.1","label":"openstack-keystone-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-keystone-2026.1","purlType":"apk","versions":[{"text":"< 29.0.1_git20260904-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 29.0.1_git20260904-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-keystone-2026.1-fips","name":"openstack-keystone-2026.1-fips","label":"openstack-keystone-2026.1-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-keystone-2026.1-fips","purlType":"apk","versions":[{"text":"< 29.0.1_git20260904-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 29.0.1_git20260904-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pgadmin4","name":"pgadmin4","label":"pgadmin4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pgadmin4","purlType":"apk","versions":[{"text":"< 9.18-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.18-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pgadmin4-fips","name":"pgadmin4-fips","label":"pgadmin4-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pgadmin4-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.18-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.18-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.11-prefect","name":"py3.11-prefect","label":"py3.11-prefect","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.11-prefect","purlType":"apk","versions":[{"text":"< 3.8.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.12-airflow-3","name":"py3.12-airflow-3","label":"py3.12-airflow-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.12-airflow-3","purlType":"apk","versions":[{"text":"< 3.3.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.12-prefect","name":"py3.12-prefect","label":"py3.12-prefect","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.12-prefect","purlType":"apk","versions":[{"text":"< 3.8.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.13-airflow-3","name":"py3.13-airflow-3","label":"py3.13-airflow-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.13-airflow-3","purlType":"apk","versions":[{"text":"< 3.3.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.13-prefect","name":"py3.13-prefect","label":"py3.13-prefect","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.13-prefect","purlType":"apk","versions":[{"text":"< 3.8.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.14-airflow-3","name":"py3.14-airflow-3","label":"py3.14-airflow-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.14-airflow-3","purlType":"apk","versions":[{"text":"< 3.3.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.14-prefect","name":"py3.14-prefect","label":"py3.14-prefect","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.14-prefect","purlType":"apk","versions":[{"text":"< 3.8.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.7-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"az","name":"az","label":"az","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/az","purlType":"apk","versions":[{"text":"< 2.90.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.90.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dask-kubernetes","name":"dask-kubernetes","label":"dask-kubernetes","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dask-kubernetes","purlType":"apk","versions":[{"text":"< 2026.3.0-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.3.0-r15","eol":null,"hubHref":null},{"vendor":"wolfi","product":"datadog-agent-7.77-core-integrations","name":"datadog-agent-7.77-core-integrations","label":"datadog-agent-7.77-core-integrations","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"datadog-agent-7.78-core-integrations","name":"datadog-agent-7.78-core-integrations","label":"datadog-agent-7.78-core-integrations","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/datadog-agent-7.78-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"datadog-agent-7.79-core-integrations","name":"datadog-agent-7.79-core-integrations","label":"datadog-agent-7.79-core-integrations","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"datadog-agent-7.80-core-integrations","name":"datadog-agent-7.80-core-integrations","label":"datadog-agent-7.80-core-integrations","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/datadog-agent-7.80-core-integrations","purlType":"apk","versions":[{"text":"< 7.80.4-r20","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.80.4-r20","eol":null,"hubHref":null},{"vendor":"wolfi","product":"datadog-agent-7.81-core-integrations","name":"datadog-agent-7.81-core-integrations","label":"datadog-agent-7.81-core-integrations","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations","purlType":"apk","versions":[{"text":"< 7.81.3-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.81.3-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ggshield","name":"ggshield","label":"ggshield","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ggshield","purlType":"apk","versions":[{"text":"< 1.55.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.55.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"jupyter-base-notebook","name":"jupyter-base-notebook","label":"jupyter-base-notebook","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/jupyter-base-notebook","purlType":"apk","versions":[{"text":"< 7.6.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.3-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k8s-sidecar","name":"k8s-sidecar","label":"k8s-sidecar","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k8s-sidecar","purlType":"apk","versions":[{"text":"< 2.11.2-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.11.2-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-earlystopping","name":"katib-earlystopping","label":"katib-earlystopping","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-earlystopping","purlType":"apk","versions":[{"text":"< 0.19.0-r42","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r42","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kserve-storage-controller","name":"kserve-storage-controller","label":"kserve-storage-controller","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kserve-storage-controller","purlType":"apk","versions":[{"text":"< 0.21.0-r1","noFixRecorded":false,"fixedIn":null},{"text":"< 0.21.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.21.0-r1 | < 0.21.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-jupyter-web-app","name":"kubeflow-jupyter-web-app","label":"kubeflow-jupyter-web-app","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-jupyter-web-app","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-apiserver","name":"kubeflow-pipelines-apiserver","label":"kubeflow-pipelines-apiserver","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-apiserver","purlType":"apk","versions":[{"text":"< 2.17.2-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.2-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-visualization-server","name":"kubeflow-pipelines-visualization-server","label":"kubeflow-pipelines-visualization-server","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-visualization-server","purlType":"apk","versions":[{"text":"< 2.17.2-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.2-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-volumes-web-app","name":"kubeflow-volumes-web-app","label":"kubeflow-volumes-web-app","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-volumes-web-app","purlType":"apk","versions":[{"text":"< 1.10.0-r26","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.10.0-r26","eol":null,"hubHref":null},{"vendor":"wolfi","product":"open-webui","name":"open-webui","label":"open-webui","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/open-webui","purlType":"apk","versions":[{"text":"< 0.11.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.11.4-r1","eol":null,"hubHref":null},{"vendor":"debian","product":"python-oauthlib","name":"python-oauthlib","label":"python-oauthlib","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/python-oauthlib","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python-oauthlib","name":"python-oauthlib","label":"python-oauthlib","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python-oauthlib","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"oauthlib","product":"oauthlib","name":"oauthlib","label":"oauthlib","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.0.0, < 4.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.0, < 4.0.0","eol":null,"hubHref":"/vendor/oauthlib/oauthlib"},{"vendor":"PyPI","product":"oauthlib","name":"oauthlib","label":"oauthlib","ecosystem":"PyPI","cpePart":null,"purl":"pkg:pypi/oauthlib","purlType":"pypi","versions":[{"text":"≥ 3.0.0, < 4.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.0, < 4.0.0","eol":null,"hubHref":null}],"affectedCount":104,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/oauthlib/oauthlib/security/advisories/GHSA-xpv3-w29h-x7cv","label":"github.com/oauthlib/oauthlib/security/advisories/GHSA-xpv3-w29h-x7cv","hostname":"github.com","tags":["WEB","X Refsource CONFIRM","REPORT"]},{"url":"https://github.com/oauthlib/oauthlib/pull/963","label":"github.com/oauthlib/oauthlib/pull/963","hostname":"github.com","tags":["WEB","X Refsource MISC","REPORT"]},{"url":"https://github.com/oauthlib/oauthlib/commit/40b0ab56da3682c2484a4b78bbff309f8025d950","label":"github.com/oauthlib/oauthlib/commit/40b0ab56da3682c2484a4b78bbff309f8025d950","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/oauthlib/oauthlib","label":"github.com/oauthlib/oauthlib","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://pypi.org/project/oauthlib","label":"pypi.org/project/oauthlib","hostname":"pypi.org","tags":["PACKAGE"]},{"url":"https://github.com/advisories/GHSA-xpv3-w29h-x7cv","label":"github.com/advisories/GHSA-xpv3-w29h-x7cv","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49265","label":"nvd.nist.gov/vuln/detail/CVE-2026-49265","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/oauthlib/oauthlib/commit/74664d3fe037a354e180e305135c6bab1747a6b0","label":"github.com/oauthlib/oauthlib/commit/74664d3fe037a354e180e305135c6bab1747a6b0","hostname":"github.com","tags":["X Refsource MISC","REPORT"]},{"url":"https://github.com/oauthlib/oauthlib/releases/tag/v4.0.0","label":"github.com/oauthlib/oauthlib/releases/tag/v4.0.0","hostname":"github.com","tags":["X Refsource MISC","REPORT"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/oauthlib/PYSEC-2026-4114.yaml","label":"github.com/pypa/advisory-database/tree/main/vulns/oauthlib/PYSEC-2026-4114.yaml","hostname":"github.com","tags":["X Refsource MISC","WEB","REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-49265","label":"security-tracker.debian.org/tracker/CVE-2026-49265","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-49265","label":"ubuntu.com/security/CVE-2026-49265","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49265","label":"www.cve.org/CVERecord?id=CVE-2026-49265","hostname":"www.cve.org","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:22103-1","SUSE-SU-2026:24139-1"],"duplicates":[],"related":["OPENSUSE-SU-2026:22103-1","SUSE-SU-2026:24139-1"]},"timeline":[{"kind":"published","date":"2026-10-13T15:47:11.854Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-13T16:19:39.092Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":27,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:50:43.447Z","stale":false,"partial":false}}