{"id":"CGA-m8gw-c22q-pmgh","modified":"2026-09-07T02:04:15.497765090Z","published":"2026-06-20T20:34:09Z","withdrawn":"2026-09-07T02:04:15.497764949Z","related":["GHSA-8678-w3jw-xfc2"],"affected":[{"package":{"name":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.6-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"gitlab-rails-ce-19.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.3.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"logstash-9.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-9.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"logstash-9.4-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-9.4-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"logstash-fips-9.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-fips-9.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"logstash-fips-9.4-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"pact-broker-docker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pact-broker-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.139.0.2.119.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"pact-broker-docker-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pact-broker-docker-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.139.0.2.119.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"ruby3.2-kube-logging-operator-fluentd-outputs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"ruby3.2-rails-7.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-rails-7.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.3.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"ruby3.2-rails-8.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-rails-8.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"ruby3.2-rails-8.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"ruby3.3-rails-7.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.3-rails-7.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.3.1-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"ruby3.3-rails-8.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.3-rails-8.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"ruby3.4-kube-logging-operator-fluentd-outputs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"ruby3.4-rails-7.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-rails-7.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.3.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"ruby3.4-rails-8.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-rails-8.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"ruby3.4-rails-8.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"ruby4.0-rails-7.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby4.0-rails-7.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.3.1-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"ruby4.0-rails-8.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby4.0-rails-8.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.5-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"logstash-9.4","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/logstash-9.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"logstash-9.4-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/logstash-9.4-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"ruby3.2-kube-logging-operator-fluentd-outputs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.2-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"ruby3.2-rails-8.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.2-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"ruby3.4-kube-logging-operator-fluentd-outputs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.4-kube-logging-operator-fluentd-outputs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}},{"package":{"name":"ruby3.4-rails-8.1","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.4-rails-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.3-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-m8gw-c22q-pmgh.json"}}],"schema_version":"1.9.0"}