{"id":"CGA-6rqg-g2hv-535w","modified":"2026-09-07T02:03:27.539719481Z","published":"2026-09-03T13:35:53Z","withdrawn":"2026-09-07T02:03:27.539719338Z","related":["CVE-2026-79771","GHSA-rh9x-7xjc-vwx2","GHSA-v2fc-qm4h-8hqv"],"affected":[{"package":{"name":"gitlab-rails-ce-18.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.10.8-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.10","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.10.8-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"pact-broker-docker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pact-broker-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.138.0.2.119.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"pact-broker-docker-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pact-broker-docker-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.138.0.2.119.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby3.2-kube-logging-operator-fluentd-outputs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby3.2-rails-7.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-rails-7.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.3.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby3.2-rails-8.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-rails-8.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby3.2-rails-8.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby3.3-rails-7.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.3-rails-7.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.3.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby3.3-rails-8.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.3-rails-8.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby3.3-rails-8.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.3-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby3.4-kube-logging-operator-fluentd-outputs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby3.4-rails-7.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-rails-7.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.3.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby3.4-rails-8.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-rails-8.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby3.4-rails-8.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby4.0-rails-7.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby4.0-rails-7.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.3.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby4.0-rails-8.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby4.0-rails-8.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby4.0-rails-8.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby4.0-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby3.2-kube-logging-operator-fluentd-outputs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.2-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby3.2-rails-8.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.2-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby3.3-rails-8.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.3-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby3.4-kube-logging-operator-fluentd-outputs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.4-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby3.4-rails-8.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.4-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}},{"package":{"name":"ruby4.0-rails-8.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby4.0-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-6rqg-g2hv-535w.json"}}],"schema_version":"1.9.0"}