commercial-gitlab-toolbox-eepackaged by Chainguard
packaged by Chainguard
Last changed
Request a free trial
Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.
Tag:
Severity:All
Expand | CVE ID | Severity | Package | Version | Last detected |
|---|---|---|---|---|---|
CVE-2026-53492 | Critical | github.com/containerd/containerd | v1.7.36 | ||
CVE-2021-23383 | Critical | handlebars | 1.0.0 | ||
CVE-2026-122006 | Critical | activestorage | 7.2.4 | ||
CVE-2019-19919 | Critical | handlebars | 1.0.0 | ||
CVE-2025-32460 | Critical | graphicsmagick | 1.3.49-r2 | ||
CVE-2021-23369 | Critical | handlebars | 1.0.0 | ||
CVE-2026-50195 | Critical | github.com/containerd/containerd | v1.7.36 | ||
CVE-2026-78661 | High | golang.org/x/net | v0.60.0 | ||
CVE-2026-126186 | High | activestorage | 7.2.4 | ||
CVE-2026-41636 | High | thrift | 0.0.0-DEVELOPMENT | ||
CVE-2026-42306 | High | github.com/docker/docker | v28.5.2+incompatible | ||
CVE-2019-16776 | High | npm | 1.0.1 | ||
CVE-2016-3956 | High | npm | 1.0.1 | ||
CVE-2026-126081 | High | actionpack | 7.2.4 | ||
GHSA-2cf5-4w76-r9qv | High | handlebars | 1.0.0 | ||
CVE-2026-119586 | High | sqlite-libs | 3.54.1-r0 | ||
CVE-2026-34040 | High | github.com/docker/docker | v28.5.2+incompatible | ||
CVE-2018-7408 | High | npm | 1.0.1 | ||
CVE-2019-16775 | High | npm | 1.0.1 | ||
CVE-2026-85396 | High | rubyzip | 2.4.1 | ||
GHSA-h6ch-v84p-w6p9 | High | diff | 1.0.0 | ||
CVE-2020-7788 | High | ini | 1.0.0 | ||
CVE-2020-7712 | High | json | 1.0.0 | ||
CVE-2026-125111 | High | rack | 2.2.23 | ||
CVE-2026-43870 | High | thrift | 0.0.0-DEVELOPMENT | ||
CVE-2026-41567 | High | github.com/docker/docker | v28.5.2+incompatible | ||
CVE-2026-53727 | High | css_parser | 1.22.0 | ||
CVE-2025-15558 | High | github.com/docker/cli | v25.0.1+incompatible | ||
CVE-2026-116591 | High | github.com/klauspost/compress | v1.18.7 | ||
GHSA-q2c6-c6pm-g3gh | High | handlebars | 1.0.0 | ||
CVE-2019-16777 | High | npm | 1.0.1 | ||
GHSA-g9r4-xpmj-mj65 | High | handlebars | 1.0.0 | ||
GHSA-q42p-pg8m-cqh6 | High | handlebars | 1.0.0 | ||
CVE-2019-20920 | High | handlebars | 1.0.0 | ||
CVE-2026-95837 | High | github.com/containerd/containerd | v1.7.36 | ||
CVE-2026-126080 | High | activesupport | 7.2.4 | ||
CVE-2026-53489 | Medium | github.com/containerd/containerd | v1.7.36 | ||
CVE-2026-15534 | Medium | perl | 5.44.0-r5 | ||
CVE-2015-8861 | Medium | handlebars | 1.0.0 | ||
CVE-2024-29034 | Medium | carrierwave | 1.3.4 | ||
CVE-2026-126085 | Medium | activestorage | 7.2.4 | ||
CVE-2026-126074 | Medium | activestorage | 7.2.4 | ||
CVE-2026-125110 | Medium | rack | 2.2.23 | ||
CVE-2026-126076 | Medium | actionpack | 7.2.4 | ||
CVE-2026-116566 | Medium | python-3.12 | 3.12.16_git20261030-r0 | ||
CVE-2026-97045 | Medium | golang.org/x/net | v0.60.0 | ||
CVE-2026-41568 | Medium | github.com/docker/docker | v28.5.2+incompatible | ||
CVE-2026-85747 | Medium | github.com/docker/distribution | v2.8.3+incompatible | ||
CVE-2026-44587 | Medium | carrierwave | 1.3.4 | ||
CVE-2024-36361 | Medium | pug | 1.0.0 | ||
CVE-2026-128085 | Medium | go.opentelemetry.io/otel/trace | v1.45.0 | ||
CVE-2026-33532 | Medium | yaml | 1.0.0 | ||
CVE-2026-126073 | Medium | actionpack | 7.2.4 | ||
CVE-2021-21353 | Medium | pug | 1.0.0 | ||
CVE-2026-126077 | Medium | actionpack | 7.2.4 | ||
CVE-2026-126078 | Medium | actionview | 7.2.4 | ||
CVE-2026-40295 | Medium | devise | 4.9.4 | ||
CVE-2026-126069 | Medium | actionview | 7.2.4 | ||
CVE-2023-49090 | Medium | carrierwave | 1.3.4 | ||
CVE-2026-32700 | Medium | devise | 4.9.4 | ||
CVE-2026-126072 | Medium | actionpack | 7.2.4 | ||
CVE-2020-15095 | Medium | npm | 1.0.1 | ||
CVE-2026-126079 | Medium | actionview | 7.2.4 | ||
CVE-2026-126070 | Medium | actionview | 7.2.4 | ||
CVE-2026-126084 | Medium | activestorage | 7.2.4 | ||
CVE-2026-33997 | Medium | github.com/docker/docker | v28.5.2+incompatible | ||
CVE-2026-63183 | Medium | omniauth | 2.1.4 | ||
CVE-2013-4116 | Low | npm | 1.0.1 | ||
CVE-2026-126067 | Low | actionpack | 7.2.4 | ||
CVE-2026-126188 | Low | activestorage | 7.2.4 | ||
CVE-2026-125108 | Low | rack | 2.2.23 | ||
CVE-2026-48978 | Low | oras.land/oras-go | v1.2.5 | ||
GHSA-wx77-rp39-c6vg | Low | markdown | 1.0.0 | ||
CVE-2026-24001 | Low | diff | 1.0.0 | ||
CVE-2026-126068 | Low | actionmailbox | 7.2.4 | ||
CVE-2026-103995 | Low | python-3.12 | 3.12.16_git20261030-r0 | ||
GO-2026-5932 | Unknown | golang.org/x/crypto | v0.58.0 | ||
GO-2026-5932 | Unknown | golang.org/x/crypto | v0.57.0 |
Last updated:
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.