{"id":"CGA-4q5r-ccpx-69cm","modified":"2026-09-07T02:03:17.902654035Z","published":"2026-01-09T21:47:12.593631Z","withdrawn":"2026-09-07T02:03:17.902653437Z","related":["GHSA-wx77-rp39-c6vg"],"affected":[{"package":{"name":"code-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/code-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"code-server-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/code-server-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-18.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-18.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-18.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-19.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-19.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-19.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-19.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-19.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-19.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-19.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-19.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-doc-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-doc-18.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-18.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-doc-18.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-18.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-doc-18.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-18.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-doc-18.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-18.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-doc-18.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-18.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-doc-18.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-18.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-doc-fips-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-fips-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-doc-fips-18.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-fips-18.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-doc-fips-18.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-fips-18.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-doc-fips-18.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-fips-18.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-doc-fips-18.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-fips-18.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-doc-fips-18.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-fips-18.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-doc-fips-18.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-fips-18.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"code-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/code-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}},{"package":{"name":"code-server-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/code-server-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-4q5r-ccpx-69cm.json"}}],"schema_version":"1.9.0"}