{"schema_version":"1.9.0","id":"CGA-mr48-wppj-4qv8","published":"2026-04-09T14:46:56.387822Z","modified":"2026-09-07T02:04:17.860440050Z","withdrawn":"2026-09-07T02:04:17.860439911Z","related":["CVE-2026-39363","GHSA-p9ff-h696-f583"],"affected":[{"package":{"name":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mr48-wppj-4qv8.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mr48-wppj-4qv8.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.2.1-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mr48-wppj-4qv8.json"}},{"package":{"name":"langfuse-3-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.179.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mr48-wppj-4qv8.json"}},{"package":{"name":"langfuse-fips-3-worker","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/langfuse-fips-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.179.1-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mr48-wppj-4qv8.json"}},{"package":{"name":"vite","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vite"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.11-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mr48-wppj-4qv8.json"}},{"package":{"name":"vitess-22","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vitess-22"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.4-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mr48-wppj-4qv8.json"}},{"package":{"name":"vitess-23","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/vitess-23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.3-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mr48-wppj-4qv8.json"}},{"package":{"name":"langfuse-3-worker","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/langfuse-3-worker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.179.1-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mr48-wppj-4qv8.json"}},{"package":{"name":"vite","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vite"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.11-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mr48-wppj-4qv8.json"}},{"package":{"name":"vitess-23","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/vitess-23"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.3-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-mr48-wppj-4qv8.json"}}]}