{"id":"CGA-v9xj-h368-r4rj","modified":"2026-09-07T02:04:11.902369410Z","published":"2026-07-29T20:03:03Z","withdrawn":"2026-09-07T02:04:11.902369258Z","related":["CVE-2026-54603","GHSA-pp92-crg2-gfv9"],"affected":[{"package":{"name":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.6.8-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v9xj-h368-r4rj.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.9.8-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v9xj-h368-r4rj.json"}},{"package":{"name":"ruby3.2-oauth2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.2-oauth2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v9xj-h368-r4rj.json"}},{"package":{"name":"ruby3.3-oauth2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.3-oauth2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v9xj-h368-r4rj.json"}},{"package":{"name":"ruby3.4-oauth2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby3.4-oauth2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v9xj-h368-r4rj.json"}},{"package":{"name":"ruby4.0-oauth2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/ruby4.0-oauth2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v9xj-h368-r4rj.json"}},{"package":{"name":"ruby3.2-oauth2","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.2-oauth2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v9xj-h368-r4rj.json"}},{"package":{"name":"ruby3.3-oauth2","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.3-oauth2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v9xj-h368-r4rj.json"}},{"package":{"name":"ruby3.4-oauth2","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby3.4-oauth2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v9xj-h368-r4rj.json"}},{"package":{"name":"ruby4.0-oauth2","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/ruby4.0-oauth2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-v9xj-h368-r4rj.json"}}],"schema_version":"1.9.0"}