{"id":"CGA-cf96-5cpw-x6rg","modified":"2026-08-07T08:00:25.588402734Z","published":"2026-01-29T00:45:59.411595Z","withdrawn":"2026-08-07T08:00:25.588402600Z","related":["CVE-2024-11931","GHSA-rppq-5vq8-crrp"],"affected":[{"package":{"name":"gitlab-base-fips-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-base-fips-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-base-fips-17.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-base-fips-17.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-cng-fips-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-cng-fips-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-cng-fips-17.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-cng-fips-17.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-container-registry-fips-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-container-registry-fips-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-container-registry-fips-17.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-container-registry-fips-17.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-docker-machine-fips-17.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-docker-machine-fips-17.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-elasticsearch-indexer-fips-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-elasticsearch-indexer-fips-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-elasticsearch-indexer-fips-17.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-elasticsearch-indexer-fips-17.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-logger-fips-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-logger-fips-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-logger-fips-17.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-logger-fips-17.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-runner-fips-17.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-runner-fips-17.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-runner-helper-compat-fips-17.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-runner-helper-compat-fips-17.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-runner-helper-fips-17.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-runner-helper-fips-17.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-runner-helper-oci-entrypoint-fips-17.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-runner-helper-oci-entrypoint-fips-17.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-runner-oci-entrypoint-fips-17.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-runner-oci-entrypoint-fips-17.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-shell-fips-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-shell-fips-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-shell-fips-17.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-shell-fips-17.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-toolbox-fips-17.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-toolbox-fips-17.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}},{"package":{"name":"gitlab-toolbox-fips-17.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-toolbox-fips-17.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.8.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-cf96-5cpw-x6rg.json"}}],"schema_version":"1.7.3"}