Withdrawn security advisory

{
  "id": "e667f662a81cf97e5e4849f6a168523acb427fa14fac339955d445fc63750a37",
  "url": "https://osv.dev/vulnerability/CGA-2w2f-hh5j-xrx2",
  "method": "structured",
  "payload": {
    "kind": "withdrawal",
    "title": "CGA-2w2f-hh5j-xrx2",
    "summary": "CGA-2w2f-hh5j-xrx2",
    "evidence": "osv:CGA-2w2f-hh5j-xrx2",
    "products": [
      {
        "name": {
          "value": "openjdk-11-openj9-default-policy",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0.53.0-r0",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "critical",
    "structured": {
      "id": "CGA-2w2f-hh5j-xrx2",
      "aliases": [
        "CGA-2w2f-hh5j-xrx2"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0.53.0-r0"
                }
              ]
            }
          ],
          "package": {
            "name": "openjdk-11-openj9-default-policy",
            "purl": "pkg:apk/chainguard/openjdk-11-openj9-default-policy?arch=aarch64",
            "ecosystem": "Chainguard"
          },
          "database_specific": {
            "source": "https://advisories.cgr.dev/chainguard/v3/osv/CGA-2w2f-hh5j-xrx2.json"
          },
          "ecosystem_specific": {
            "components": [
              {
                "component_name": "openjdk-11-openj9-default-policy",
                "component_purl": "pkg:apk/openjdk-11-openj9-default-policy@0.53.0-r0",
                "component_type": "apk",
                "component_version": "0.53.0-r0",
                "component_location": "/.PKGINFO",
                "latest_event_status": "fixed",
                "latest_event_timestamp": "2025-08-23T09:11:41Z"
              }
            ]
          }
        }
      ],
      "modified": "2026-10-27T19:03:39.983548770Z",
      "provider": "osv",
      "upstream": [
        "CVE-2016-3427",
        "GHSA-php4-mj74-f79r"
      ],
      "references": [
        "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3427",
        "https://kc.mcafee.com/corporate/index?page=content&id=SB10159",
        "https://access.redhat.com/errata/RHSA-2016:1430",
        "https://lists.apache.org/thread.html/r5f48b16573a11fdf0b557cc3d1d71423ecde8ee771c29f32334fa948%40%3Cdev.cassandra.apache.org%3E",
        "https://security.netapp.com/advisory/ntap-20160420-0001/",
        "https://access.redhat.com/errata/RHSA-2017:1216",
        "https://lists.apache.org/thread.html/rc3abf40b06c511d5693baf707d6444bf7745e6a1e343e6f530a12258%40%3Cuser.cassandra.apache.org%3E",
        "https://security.gentoo.org/glsa/201606-18",
        "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
        "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E",
        "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
        "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E",
        "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E",
        "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
        "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E",
        "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
        "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E",
        "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
        "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
        "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E",
        "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
        "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2016-3427",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 464070,
  "published_at": "2025-10-30T19:15:54+00:00"
}