{"id":"CGA-v5gq-2xcc-j4ch","modified":"2026-09-07T02:04:29.139898274Z","published":"2026-06-17T14:30:08Z","withdrawn":"2026-09-07T02:04:29.139898110Z","related":["CVE-2026-9204","GHSA-c4m8-pv9j-v7mm"],"affected":[{"package":{"name":"gitaly-config-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitaly-config-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-base-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-base-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-base-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-base-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-certificates-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-certificates-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-cfssl-self-sign-scripts-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-cfssl-self-sign-scripts-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-cng-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-cng-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-cng-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-cng-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-container-registry-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-container-registry-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-container-registry-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-container-registry-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-container-registry-scripts-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-container-registry-scripts-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-docker-machine-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-docker-machine-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-docker-machine-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-docker-machine-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-exporter-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-exporter-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-exporter-scripts-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-exporter-scripts-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-gitaly-scripts-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-gitaly-scripts-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-logger-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-logger-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-logger-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-logger-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-pages-scripts-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-pages-scripts-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-rails-scripts-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-scripts-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-rails-scripts-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-scripts-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-runner-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-runner-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-runner-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-runner-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-runner-helper-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-runner-helper-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-runner-helper-compat-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-runner-helper-compat-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-runner-helper-compat-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-runner-helper-compat-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-runner-helper-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-runner-helper-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-runner-helper-oci-entrypoint-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-runner-helper-oci-entrypoint-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-runner-helper-oci-entrypoint-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-runner-helper-oci-entrypoint-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-runner-oci-entrypoint-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-runner-oci-entrypoint-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-runner-oci-entrypoint-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-runner-oci-entrypoint-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-shell-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-shell-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-shell-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-shell-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-shell-scripts-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-shell-scripts-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-sidekiq-ce-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-sidekiq-ce-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-sidekiq-ce-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-sidekiq-ce-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-toolbox-ce-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-toolbox-ce-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-toolbox-ce-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-toolbox-ce-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-webservice-ce-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-webservice-ce-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-webservice-ce-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-webservice-ce-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-workhorse-scripts-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-workhorse-scripts-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-workhorse-scripts-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-workhorse-scripts-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-docker-machine-19.0","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitlab-docker-machine-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-runner-19.0","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitlab-runner-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-runner-helper-19.0","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitlab-runner-helper-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-runner-helper-compat-19.0","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitlab-runner-helper-compat-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-runner-helper-oci-entrypoint-19.0","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitlab-runner-helper-oci-entrypoint-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}},{"package":{"name":"gitlab-runner-oci-entrypoint-19.0","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gitlab-runner-oci-entrypoint-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v5gq-2xcc-j4ch.json"}}],"schema_version":"1.7.5"}