{"schema_version":"1.7.3","id":"CGA-ghqj-xpxq-7jx6","published":"2026-02-05T01:32:15.954143Z","modified":"2026-09-07T02:03:57.137440752Z","withdrawn":"2026-09-07T02:03:57.137440492Z","related":["CVE-2026-0775","GHSA-3966-f6p6-2qr9"],"affected":[{"package":{"name":"actions-runner","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/actions-runner"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.331.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"code-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/code-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.106.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.1.6-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.8-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.6-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4.6-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.5","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.5.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.6.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.7.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"gitlab-rails-ce-assets-18.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.8.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.1.6-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.8-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.6-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.4.6-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.6","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.6.5-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.7.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"gitlab-rails-ce-assets-fips-18.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.8.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"graalvm-24-ce-nodejs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/graalvm-24-ce-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.2-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"graalvm-25-ce-nodejs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/graalvm-25-ce-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.2-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"npm","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.9.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"renovate","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/renovate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.3.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"saf","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/saf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"vitess-21","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vitess-21"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.6-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"vitess-22","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vitess-22"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"vitess-23","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vitess-23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"code-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/code-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.106.3-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"npm","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.9.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"renovate","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/renovate"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.3.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"saf","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/saf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"vitess-21","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vitess-21"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.6-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"vitess-22","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vitess-22"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}},{"package":{"name":"vitess-23","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vitess-23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.1-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-ghqj-xpxq-7jx6.json"}}]}