{"id":"CGA-v6ww-xcxh-rjx3","modified":"2026-09-07T02:04:29.457758659Z","published":"2026-01-29T00:49:06.011133Z","withdrawn":"2026-09-07T02:04:29.457757826Z","related":["CVE-2025-9287","GHSA-cpq7-6gpm-g9rc"],"affected":[{"package":{"name":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.1.6-r17"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.6-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.3-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.1.6-r17"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.6-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.3-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-alerting-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-alerting-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-anomaly-detection-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-maps","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-maps"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-notifications","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-observability","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-observability"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-query-workbench","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-query-workbench"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-search-relevance","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-search-relevance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-fips-alerting-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-alerting-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-fips-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-anomaly-detection-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-fips-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-fips-dashboards-maps","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-maps"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-fips-dashboards-notifications","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-fips-dashboards-observability","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-observability"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-fips-dashboards-query-workbench","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-query-workbench"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-fips-dashboards-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-fips-dashboards-search-relevance","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-search-relevance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-fips-index-management-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-index-management-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-fips-ml-commons-dashboards","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-ml-commons-dashboards"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-fips-security-analytics-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-security-analytics-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-fips-security-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-security-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-index-management-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-index-management-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-ml-commons-dashboards","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-ml-commons-dashboards"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-security-analytics-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-security-analytics-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-security-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-security-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-alerting-dashboards-plugin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-alerting-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-anomaly-detection-dashboards-plugin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-anomaly-detection-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-config","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-maps","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-maps"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-notifications","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-observability","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-observability"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-query-workbench","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-query-workbench"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-reporting","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-search-relevance","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-search-relevance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-index-management-dashboards-plugin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-index-management-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-ml-commons-dashboards","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-ml-commons-dashboards"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-security-analytics-dashboards-plugin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-security-analytics-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}},{"package":{"name":"opensearch-dashboards-3-security-dashboards-plugin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-security-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v6ww-xcxh-rjx3.json"}}],"schema_version":"1.7.5"}