{"id":"CGA-pqmp-w8cw-2f6q","modified":"2026-10-16T16:18:03.345912450Z","published":"2026-10-15T14:33:37Z","upstream":["CVE-2026-16275","GHSA-mvmh-ccfp-m833"],"affected":[{"package":{"name":"gitlab-workhorse-ce-18.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.9?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"ecosystem_specific":{"components":[{"latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-16T13:41:44Z","component_name":"gitlab-workhorse-ce-18.9","component_version":"18.9.8-r15","component_type":"apk","component_location":"/.PKGINFO","component_purl":"pkg:apk/gitlab-workhorse-ce-18.9@18.9.8-r15"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pqmp-w8cw-2f6q.json"}}],"schema_version":"1.9.0"}