{"id":"CGA-v8cr-xq93-34hx","modified":"2026-09-07T02:04:11.859101825Z","published":"2026-04-09T14:46:56.402112Z","withdrawn":"2026-09-07T02:04:11.859101703Z","related":["CVE-2026-39365","GHSA-4w7w-66w2-5vf9"],"affected":[{"package":{"name":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v8cr-xq93-34hx.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v8cr-xq93-34hx.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.2.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v8cr-xq93-34hx.json"}},{"package":{"name":"langfuse-2-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-2-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v8cr-xq93-34hx.json"}},{"package":{"name":"langfuse-3-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.164.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v8cr-xq93-34hx.json"}},{"package":{"name":"langfuse-fips-2-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-2-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.95.12-r22"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v8cr-xq93-34hx.json"}},{"package":{"name":"langfuse-fips-3-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.164.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v8cr-xq93-34hx.json"}},{"package":{"name":"vite","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vite"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.11-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v8cr-xq93-34hx.json"}},{"package":{"name":"vitess-22","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vitess-22"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.4-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v8cr-xq93-34hx.json"}},{"package":{"name":"vitess-23","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vitess-23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.3-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v8cr-xq93-34hx.json"}},{"package":{"name":"langfuse-3-worker","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/langfuse-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.164.0-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v8cr-xq93-34hx.json"}},{"package":{"name":"vite","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vite"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.11-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v8cr-xq93-34hx.json"}},{"package":{"name":"vitess-23","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vitess-23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.3-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v8cr-xq93-34hx.json"}}],"schema_version":"1.9.0"}