{"id":"CGA-3vg7-jp5m-rvrm","modified":"2026-09-07T02:03:09.095662931Z","published":"2026-06-20T20:34:07Z","withdrawn":"2026-09-07T02:03:09.095662791Z","related":["GHSA-p67v-3w7g-wjg7"],"affected":[{"package":{"name":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.6-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"logstash-9.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-9.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"logstash-9.4-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-9.4-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"logstash-fips-9.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-fips-9.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"logstash-fips-9.4-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"pact-broker-docker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pact-broker-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.139.0.2.119.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"pact-broker-docker-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pact-broker-docker-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.139.0.2.119.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"ruby3.2-kube-logging-operator-fluentd-outputs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"ruby3.2-rails-7.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-rails-7.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.3.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"ruby3.2-rails-8.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-rails-8.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"ruby3.2-rails-8.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"ruby3.3-rails-7.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.3-rails-7.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.3.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"ruby3.3-rails-8.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.3-rails-8.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"ruby3.4-kube-logging-operator-fluentd-outputs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"ruby3.4-rails-7.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-rails-7.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.3.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"ruby3.4-rails-8.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-rails-8.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"ruby3.4-rails-8.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"ruby4.0-rails-7.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby4.0-rails-7.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.3.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"ruby4.0-rails-8.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby4.0-rails-8.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"logstash-9.4","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/logstash-9.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"logstash-9.4-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/logstash-9.4-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"ruby3.2-kube-logging-operator-fluentd-outputs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.2-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"ruby3.2-rails-8.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.2-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"ruby3.4-kube-logging-operator-fluentd-outputs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.4-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}},{"package":{"name":"ruby3.4-rails-8.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.4-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3vg7-jp5m-rvrm.json"}}],"schema_version":"1.9.0"}