{"id":"CGA-4c9p-8cff-5j35","modified":"2026-09-07T02:03:15.626537250Z","published":"2026-06-21T00:26:00Z","withdrawn":"2026-09-07T02:03:15.626537107Z","related":["GHSA-wjv4-x9w8-wm3h"],"affected":[{"package":{"name":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.6-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"gitlab-rails-ce-19.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.3.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"logstash-9.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-9.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"logstash-9.4-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-9.4-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"logstash-fips-9.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-fips-9.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"logstash-fips-9.4-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"pact-broker-docker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pact-broker-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.139.0.2.119.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"pact-broker-docker-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pact-broker-docker-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.139.0.2.119.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"ruby3.2-kube-logging-operator-fluentd-outputs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"ruby3.2-rails-7.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-rails-7.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.3.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"ruby3.2-rails-8.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-rails-8.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"ruby3.2-rails-8.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"ruby3.3-rails-7.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.3-rails-7.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.3.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"ruby3.3-rails-8.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.3-rails-8.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"ruby3.4-kube-logging-operator-fluentd-outputs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"ruby3.4-rails-7.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-rails-7.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.3.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"ruby3.4-rails-8.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-rails-8.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"ruby3.4-rails-8.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"ruby4.0-rails-7.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby4.0-rails-7.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.3.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"ruby4.0-rails-8.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby4.0-rails-8.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"logstash-9.4","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/logstash-9.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"logstash-9.4-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/logstash-9.4-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"ruby3.2-kube-logging-operator-fluentd-outputs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.2-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"ruby3.2-rails-8.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.2-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"ruby3.4-kube-logging-operator-fluentd-outputs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.4-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}},{"package":{"name":"ruby3.4-rails-8.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.4-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4c9p-8cff-5j35.json"}}],"schema_version":"1.9.0"}