Skip to content
Heist/ feed
Back to feed
Unrated

Withdrawn security advisory

Type: withdrawalSources: OSVChainguard advisory: CGA-q4x7-h2vq-69hm

The source has withdrawn this advisory.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
Not specified
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 08:47 UTC · Revision 1

Source evidence

CGA-q4x7-h2vq-69hm

core-osv · Original source

Published 24 Mar 2026, 07:11 UTC

CGA-q4x7-h2vq-69hm

osv:CGA-q4x7-h2vq-69hm

apm-server-8.19

Fixed versions: Not specified

Complete source record
{
  "id": "74ebbff58bfea4d698c0346f43e8cf0d9b48fdd28957adab78484e23239f9e1a",
  "url": "https://osv.dev/vulnerability/CGA-q4x7-h2vq-69hm",
  "method": "structured",
  "payload": {
    "kind": "withdrawal",
    "title": "CGA-q4x7-h2vq-69hm",
    "summary": "CGA-q4x7-h2vq-69hm",
    "evidence": "osv:CGA-q4x7-h2vq-69hm",
    "products": [
      {
        "name": {
          "value": "apm-server-8.19",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "medium",
    "structured": {
      "id": "CGA-q4x7-h2vq-69hm",
      "aliases": [
        "CGA-q4x7-h2vq-69hm"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                }
              ]
            }
          ],
          "package": {
            "name": "apm-server-8.19",
            "purl": "pkg:apk/chainguard/apm-server-8.19?arch=aarch64",
            "ecosystem": "Chainguard"
          },
          "database_specific": {
            "source": "https://advisories.cgr.dev/chainguard/v3/osv/CGA-q4x7-h2vq-69hm.json"
          },
          "ecosystem_specific": {
            "components": [
              {
                "component_name": "github.com/elastic/beats/v7",
                "component_purl": "pkg:golang/github.com/elastic/beats/v7",
                "component_type": "go-module",
                "component_version": "",
                "component_location": "/usr/bin/apm-server",
                "latest_event_status": "",
                "latest_event_timestamp": ""
              }
            ]
          }
        }
      ],
      "modified": "2026-10-20T01:02:11.890519505Z",
      "provider": "osv",
      "upstream": [
        "CVE-2026-26931",
        "GHSA-5vrw-qjxw-89r5",
        "GO-2026-4790"
      ],
      "references": [
        "https://nvd.nist.gov/vuln/detail/CVE-2026-26931",
        "https://github.com/elastic/beats/commit/de072c4e371eafeb2a42d65b9ad513f666e4ffd7",
        "https://discuss.elastic.co/t/metricbeat-8-19-13-9-2-5-security-update-esa-2026-09/385532",
        "https://github.com/elastic/beats"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2026-26931",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 376962,
  "published_at": "2026-03-24T07:11:08+00:00"
}