Skip to content
Heist/ feed
Back to feed
Unrated

Withdrawn security advisory

Type: withdrawalSources: OSVChainguard advisory: CGA-jqq9-w5vw-c4vm

The source has withdrawn this advisory.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
Not specified
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 08:47 UTC · Revision 1

Source evidence

CGA-jqq9-w5vw-c4vm

core-osv · Original source

Published 24 Mar 2026, 07:10 UTC

CGA-jqq9-w5vw-c4vm

osv:CGA-jqq9-w5vw-c4vm

apm-server-9.3

Fixed versions: Not specified

Complete source record
{
  "id": "f5e43116dbdc8a91f9408490b7225eba2b024d71f2a32ae39d84cf9a58a4d202",
  "url": "https://osv.dev/vulnerability/CGA-jqq9-w5vw-c4vm",
  "method": "structured",
  "payload": {
    "kind": "withdrawal",
    "title": "CGA-jqq9-w5vw-c4vm",
    "summary": "CGA-jqq9-w5vw-c4vm",
    "evidence": "osv:CGA-jqq9-w5vw-c4vm",
    "products": [
      {
        "name": {
          "value": "apm-server-9.3",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "medium",
    "structured": {
      "id": "CGA-jqq9-w5vw-c4vm",
      "aliases": [
        "CGA-jqq9-w5vw-c4vm"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                }
              ]
            }
          ],
          "package": {
            "name": "apm-server-9.3",
            "purl": "pkg:apk/chainguard/apm-server-9.3?arch=x86_64",
            "ecosystem": "Chainguard"
          },
          "database_specific": {
            "source": "https://advisories.cgr.dev/chainguard/v3/osv/CGA-jqq9-w5vw-c4vm.json"
          },
          "ecosystem_specific": {
            "components": [
              {
                "component_name": "github.com/elastic/beats/v7",
                "component_purl": "pkg:golang/github.com/elastic/beats/v7",
                "component_type": "go-module",
                "component_version": "",
                "component_location": "/usr/bin/apm-server",
                "latest_event_status": "",
                "latest_event_timestamp": ""
              }
            ]
          }
        }
      ],
      "modified": "2026-10-20T01:02:14.853681721Z",
      "provider": "osv",
      "upstream": [
        "CVE-2026-26933",
        "GHSA-27qj-9gvp-8rh9",
        "GO-2026-4789"
      ],
      "references": [
        "https://discuss.elastic.co/t/packetbeat-8-19-11-9-2-5-security-update-esa-2026-11/385533",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26933.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-26933"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2026-26933",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 376989,
  "published_at": "2026-03-24T07:10:15+00:00"
}