{"id":"CGA-89cr-3656-w92w","modified":"2026-01-28T03:23:15.764453Z","published":"2025-02-10T08:08:47.884536Z","withdrawn":"2026-01-28T03:23:15.764453Z","related":["CGA-89cr-3656-w92w","CVE-2025-22866","GHSA-3whm-j4xm-rv8x"],"affected":[{"package":{"name":"gitlab-cng-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-cng-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitaly-config-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitaly-config-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-base-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-base-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-certificates-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-certificates-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-cfssl-self-sign-scripts-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-cfssl-self-sign-scripts-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-container-registry-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-container-registry-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-container-registry-compat-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-container-registry-compat-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-container-registry-scripts-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-container-registry-scripts-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-elasticsearch-indexer-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-elasticsearch-indexer-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-elasticsearch-indexer-compat-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-elasticsearch-indexer-compat-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-exporter-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-exporter-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-exporter-scripts-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-exporter-scripts-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-geo-logcursor-scripts-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-geo-logcursor-scripts-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-gitaly-scripts-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-gitaly-scripts-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-logger-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-logger-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-logger-compat-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-logger-compat-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-mailroom-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-mailroom-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-mailroom-scripts-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-mailroom-scripts-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-pages-scripts-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-pages-scripts-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-rails-scripts-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-scripts-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-shell-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-shell-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-shell-scripts-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-shell-scripts-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-shell-scripts-compat-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-shell-scripts-compat-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-sidekiq-scripts-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-sidekiq-scripts-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-toolbox-scripts-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-toolbox-scripts-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-webservice-config-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-webservice-config-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-webservice-scripts-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-webservice-scripts-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}},{"package":{"name":"gitlab-workhorse-scripts-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-workhorse-scripts-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.4-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-89cr-3656-w92w.json"}}],"schema_version":"1.7.3"}