{"id":"CGA-6j2p-2mv7-694p","modified":"2026-05-28T09:16:13Z","published":"2026-05-09T16:31:07.528353Z","related":["CVE-2026-40295","GHSA-jp94-3292-c3xv"],"affected":[{"package":{"name":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6j2p-2mv7-694p.json"}},{"package":{"name":"gitlab-rails-ce-18.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.6-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6j2p-2mv7-694p.json"}},{"package":{"name":"gitlab-rails-ce-18.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4.6-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6j2p-2mv7-694p.json"}},{"package":{"name":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.5.5-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6j2p-2mv7-694p.json"}},{"package":{"name":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.6.6-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6j2p-2mv7-694p.json"}},{"package":{"name":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.9.6-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6j2p-2mv7-694p.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.6-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6j2p-2mv7-694p.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.5.5-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6j2p-2mv7-694p.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.6.6-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6j2p-2mv7-694p.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.7.6-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6j2p-2mv7-694p.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.8.9-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6j2p-2mv7-694p.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.9.6-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6j2p-2mv7-694p.json"}}],"schema_version":"1.7.5"}