{"id":"CGA-xc4v-6396-79v2","modified":"2026-09-07T02:04:41.052769797Z","published":"2026-01-29T00:48:49.410528Z","withdrawn":"2026-09-07T02:04:41.052769601Z","related":["CVE-2025-9288","GHSA-95m3-7q98-8xr5"],"affected":[{"package":{"name":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.1.6-r15"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.6-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.1.6-r30"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.11.6-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.3-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-alerting-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-alerting-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-anomaly-detection-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-maps","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-maps"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-notifications","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-observability","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-observability"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-query-workbench","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-query-workbench"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-search-relevance","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-search-relevance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-fips-alerting-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-alerting-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-fips-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-anomaly-detection-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-fips-config","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-fips-dashboards-maps","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-maps"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-fips-dashboards-notifications","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-fips-dashboards-observability","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-observability"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-fips-dashboards-query-workbench","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-query-workbench"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-fips-dashboards-reporting","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-fips-dashboards-search-relevance","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-search-relevance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-fips-index-management-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-index-management-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-fips-ml-commons-dashboards","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-ml-commons-dashboards"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-fips-security-analytics-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-security-analytics-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-fips-security-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-security-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-index-management-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-index-management-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-ml-commons-dashboards","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-ml-commons-dashboards"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-security-analytics-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-security-analytics-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-security-dashboards-plugin","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-3-security-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-alerting-dashboards-plugin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-alerting-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-anomaly-detection-dashboards-plugin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-anomaly-detection-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-config","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-maps","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-maps"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-notifications","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-notifications"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-observability","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-observability"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-query-workbench","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-query-workbench"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-reporting","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-reporting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-dashboards-search-relevance","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-search-relevance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-index-management-dashboards-plugin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-index-management-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-ml-commons-dashboards","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-ml-commons-dashboards"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-security-analytics-dashboards-plugin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-security-analytics-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}},{"package":{"name":"opensearch-dashboards-3-security-dashboards-plugin","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opensearch-dashboards-3-security-dashboards-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xc4v-6396-79v2.json"}}],"schema_version":"1.7.5"}