Skip to content
Heist/ feed
Back to feed
Unrated

Withdrawn security advisory

Type: withdrawalSources: OSVChainguard advisory: CGA-rj9h-rrvx-7jwr

The source has withdrawn this advisory.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
Not specified
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 08:47 UTC · Revision 1

Source evidence

CGA-rj9h-rrvx-7jwr

core-osv · Original source

Published 24 Mar 2026, 07:11 UTC

CGA-rj9h-rrvx-7jwr

osv:CGA-rj9h-rrvx-7jwr

apm-server-9.2

Fixed versions: Not specified

Complete source record
{
  "id": "d869f0c70373f17c53b7a22c0d0455c66a7a3aa52b6641fbcea404b90c44b774",
  "url": "https://osv.dev/vulnerability/CGA-rj9h-rrvx-7jwr",
  "method": "structured",
  "payload": {
    "kind": "withdrawal",
    "title": "CGA-rj9h-rrvx-7jwr",
    "summary": "CGA-rj9h-rrvx-7jwr",
    "evidence": "osv:CGA-rj9h-rrvx-7jwr",
    "products": [
      {
        "name": {
          "value": "apm-server-9.2",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "medium",
    "structured": {
      "id": "CGA-rj9h-rrvx-7jwr",
      "aliases": [
        "CGA-rj9h-rrvx-7jwr"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                }
              ]
            }
          ],
          "package": {
            "name": "apm-server-9.2",
            "purl": "pkg:apk/chainguard/apm-server-9.2?arch=aarch64",
            "ecosystem": "Chainguard"
          },
          "database_specific": {
            "source": "https://advisories.cgr.dev/chainguard/v3/osv/CGA-rj9h-rrvx-7jwr.json"
          },
          "ecosystem_specific": {
            "components": [
              {
                "component_name": "github.com/elastic/beats/v7",
                "component_purl": "pkg:golang/github.com/elastic/beats/v7",
                "component_type": "go-module",
                "component_version": "",
                "component_location": "/usr/bin/apm-server",
                "latest_event_status": "",
                "latest_event_timestamp": ""
              }
            ]
          }
        }
      ],
      "modified": "2026-10-20T01:02:11.101782545Z",
      "provider": "osv",
      "upstream": [
        "CVE-2026-26931",
        "GHSA-5vrw-qjxw-89r5",
        "GO-2026-4790"
      ],
      "references": [
        "https://nvd.nist.gov/vuln/detail/CVE-2026-26931",
        "https://github.com/elastic/beats/commit/de072c4e371eafeb2a42d65b9ad513f666e4ffd7",
        "https://discuss.elastic.co/t/metricbeat-8-19-13-9-2-5-security-update-esa-2026-09/385532",
        "https://github.com/elastic/beats"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2026-26931",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 376950,
  "published_at": "2026-03-24T07:11:13+00:00"
}