{"id":"CGA-6chm-33qp-3r9p","modified":"2026-09-07T02:03:25.642404905Z","published":"2026-07-24T18:09:11Z","withdrawn":"2026-09-07T02:03:25.642404699Z","related":["CVE-2026-54696","GHSA-x2f5-4prf-w687"],"affected":[{"package":{"name":"gitlab-rails-ce-19.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.3.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.3.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"jruby-10.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/jruby-10.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"logstash-8.19","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-8.19"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.19-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"logstash-8.19-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-8.19-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.19-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"logstash-8.19-with-output-opensearch","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-8.19-with-output-opensearch"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.19-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"logstash-9.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"logstash-9.2-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-9.2-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"logstash-9.2-with-output-opensearch","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-9.2-with-output-opensearch"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"pact-broker-docker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pact-broker-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.141.0.2.119.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"pghero","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pghero"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"pghero-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pghero-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"ruby3.2-fluentd-kubernetes-daemonset-1.19-kinesis","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-fluentd-kubernetes-daemonset-1.19-kinesis"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2.1.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"ruby3.2-kube-logging-operator-fluentd-outputs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"ruby3.4-kube-logging-operator-fluentd-outputs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"truffleruby","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/truffleruby"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"jruby-10.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/jruby-10.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"ruby3.2-fluentd-kubernetes-daemonset-1.19-kinesis","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.2-fluentd-kubernetes-daemonset-1.19-kinesis"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2.1.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"ruby3.2-kube-logging-operator-fluentd-outputs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.2-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}},{"package":{"name":"ruby3.4-kube-logging-operator-fluentd-outputs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.4-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6chm-33qp-3r9p.json"}}],"schema_version":"1.9.0"}