gitlab-toolbox-ce-fipspackaged by Chainguard
packaged by Chainguard
Last changed
Request a free trial
Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.
Tag:
Severity:All
Expand | CVE ID | Severity | Package | Version | Last detected |
|---|---|---|---|---|---|
CVE-2026-50195 | Critical | github.com/containerd/containerd | v1.7.33 | ||
CVE-2025-32460 | Critical | graphicsmagick | 1.3.48-r0 | ||
CVE-2026-53492 | Critical | github.com/containerd/containerd | v1.7.33 | ||
CVE-2026-56853 | High | stdlib | go1.26.5 | ||
CVE-2026-9669 | High | python-3.12 | 3.12.13-r10 | ||
CVE-2026-56862 | High | stdlib | go1.26.5 | ||
CVE-2026-26960 | High | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-26960 | High | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-56859 | High | stdlib | go1.26.5 | ||
CVE-2026-53727 | High | css_parser | 1.14.0 | ||
CVE-2026-56859 | High | stdlib | go1.26.5 | ||
CVE-2026-56862 | High | azcopy-fips | 10.32.7-r0 | ||
CVE-2026-24842 | High | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-46600 | High | stdlib | go1.26.5 | ||
CVE-2026-26960 | High | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-59871 | High | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-54876 | High | openssl | 3.6.3-r4 | ||
CVE-2026-59939 | High | httplib2 | 0.20.4 | ||
CVE-2026-71556 | High | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-59873 | High | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-71556 | High | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-59873 | High | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-59874 | High | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-59874 | High | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-71556 | High | github.com/go-git/go-git/v5 | v5.19.1 | ||
CVE-2026-61666 | High | websocket-driver | 0.8.0 | ||
CVE-2026-4224 | High | python-3.12 | 3.12.13-r10 | ||
CVE-2026-54876 | High | libssl3 | 3.6.3-r4 | ||
CVE-2026-59874 | High | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-7210 | High | python-3.12 | 3.12.13-r10 | ||
CVE-2026-24842 | High | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-34040 | High | github.com/docker/docker | v28.0.0+incompatible | ||
CVE-2026-59871 | High | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-39821 | High | stdlib | go1.26.5 | ||
CVE-2026-24842 | High | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-71556 | High | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-4786 | High | python-3.12 | 3.12.13-r10 | ||
CVE-2026-54904 | High | concurrent-ruby | 1.3.6 | ||
CVE-2026-33818 | High | stdlib | go1.26.5 | ||
CVE-2026-56859 | High | stdlib | go1.26.5 | ||
CVE-2026-33818 | High | azcopy-fips | 10.32.7-r0 | ||
CVE-2026-54876 | High | libcrypto3 | 3.6.3-r4 | ||
CVE-2026-56859 | High | azcopy-fips | 10.32.7-r0 | ||
CVE-2026-56859 | High | stdlib | go1.26.5 | ||
CVE-2026-56853 | High | azcopy-fips | 10.32.7-r0 | ||
CVE-2026-33818 | High | stdlib | go1.26.5 | ||
CVE-2026-56853 | High | stdlib | go1.26.5 | ||
CVE-2026-56862 | High | stdlib | go1.26.5 | ||
CVE-2026-56853 | High | stdlib | go1.26.5 | ||
CVE-2026-56862 | High | stdlib | go1.26.5 | ||
CVE-2026-59873 | High | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-59871 | High | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-56862 | High | stdlib | go1.26.5 | ||
CVE-2026-15308 | High | python-3.12 | 3.12.13-r10 | ||
CVE-2026-56853 | High | stdlib | go1.26.5 | ||
CVE-2026-33818 | High | stdlib | go1.26.5 | ||
CVE-2026-3644 | High | python-3.12 | 3.12.13-r10 | ||
CVE-2026-33818 | High | stdlib | go1.26.5 | ||
CVE-2026-56860 | Medium | stdlib | go1.26.5 | ||
CVE-2026-56860 | Medium | stdlib | go1.26.5 | ||
CVE-2026-3446 | Medium | python-3.12 | 3.12.13-r10 | ||
CVE-2026-71557 | Medium | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-15534 | Medium | perl | 5.44.0-r0 | ||
CVE-2026-29786 | Medium | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-40295 | Medium | devise | 4.9.4 | ||
CVE-2026-56860 | Medium | azcopy-fips | 10.32.7-r0 | ||
CVE-2026-23950 | Medium | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-23745 | Medium | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-29786 | Medium | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-31802 | Medium | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-44476 | Medium | doorkeeper-openid_connect | 1.9.0 | ||
CVE-2026-73648 | Medium | rails-html-sanitizer | 1.7.0 | ||
CVE-2026-44836 | Medium | view_component | 3.23.2 | ||
CVE-2025-15366 | Medium | python-3.12 | 3.12.13-r10 | ||
CVE-2026-23950 | Medium | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-31802 | Medium | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-59875 | Medium | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-54464 | Medium | websocket-driver | 0.8.0 | ||
CVE-2026-32700 | Medium | devise | 4.9.4 | ||
CVE-2025-15367 | Medium | python-3.12 | 3.12.13-r10 | ||
CVE-2026-56858 | Medium | azcopy-fips | 10.32.7-r0 | ||
CVE-2025-67202 | Medium | sidekiq-cron | 2.3.1 | ||
CVE-2026-53489 | Medium | github.com/containerd/containerd | v1.7.33 | ||
CVE-2025-12781 | Medium | python-3.12 | 3.12.13-r10 | ||
CVE-2026-71557 | Medium | github.com/go-git/go-git/v5 | v5.19.1 | ||
CVE-2026-23745 | Medium | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-71557 | Medium | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-44587 | Medium | carrierwave | 1.3.4 | ||
CVE-2026-44312 | Medium | css_parser | 1.14.0 | ||
CVE-2026-53655 | Medium | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
CVE-2023-49090 | Medium | carrierwave | 1.3.4 | ||
CVE-2026-29786 | Medium | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-54171 | Medium | excon | 1.3.0 | ||
CVE-2026-56858 | Medium | stdlib | go1.26.5 | ||
CVE-2026-44837 | Medium | view_component | 3.23.2 | ||
CVE-2026-71557 | Medium | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-59875 | Medium | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-56860 | Medium | stdlib | go1.26.5 | ||
CVE-2026-33532 | Medium | yaml | 1.0.0 | ||
CVE-2026-54463 | Medium | websocket-driver | 0.8.0 | ||
CVE-2026-56858 | Medium | stdlib | go1.26.5 | ||
CVE-2026-31802 | Medium | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-73490 | Medium | loofah | 2.25.1 | ||
CVE-2026-56860 | Medium | stdlib | go1.26.5 | ||
CVE-2024-29034 | Medium | carrierwave | 1.3.4 | ||
CVE-2026-33997 | Medium | github.com/docker/docker | v28.0.0+incompatible | ||
CVE-2026-54465 | Medium | websocket-driver | 0.8.0 | ||
CVE-2026-53655 | Medium | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-23745 | Medium | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-2297 | Medium | python-3.12 | 3.12.13-r10 | ||
CVE-2026-6019 | Medium | python-3.12 | 3.12.13-r10 | ||
CVE-2026-53655 | Medium | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-23950 | Medium | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
GHSA-5prr-v3j2-97mh | Medium | nokogiri | 1.19.3 | ||
CVE-2026-56858 | Medium | stdlib | go1.26.5 | ||
CVE-2026-59875 | Medium | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
CVE-2026-56858 | Medium | stdlib | go1.26.5 | ||
CVE-2026-10722 | Low | github.com/cilium/ebpf | v0.16.0 | ||
GHSA-5v8h-3h3q-446p | Low | nokogiri | 1.19.3 | ||
GHSA-p67v-3w7g-wjg7 | Low | nokogiri | 1.19.3 | ||
CVE-2025-13462 | Low | python-3.12 | 3.12.13-r10 | ||
GHSA-8678-w3jw-xfc2 | Low | nokogiri | 1.19.3 | ||
CVE-2026-54906 | Low | concurrent-ruby | 1.3.6 | ||
CVE-2026-18503 | Low | python-3.12 | 3.12.13-r10 | ||
CVE-2026-18503 | Low | python-3.12-base | 3.12.13-r10 | ||
GHSA-wfpw-mmfh-qq69 | Low | nokogiri | 1.19.3 | ||
CVE-2026-54522 | Low | msgpack | 1.5.4 | ||
CVE-2026-6879 | Low | python-3.12 | 3.12.13-r10 | ||
CVE-2026-73491 | Low | loofah | 2.25.1 | ||
CVE-2026-24001 | Low | diff | 1.0.0 | ||
GHSA-wjv4-x9w8-wm3h | Low | nokogiri | 1.19.3 | ||
GHSA-5qhf-9phg-95m2 | Low | loofah | 2.25.1 | ||
CVE-2026-54905 | Low | concurrent-ruby | 1.3.6 | ||
CVE-2026-54696 | Low | json | 2.19.2 | ||
GHSA-phwj-rprq-35pp | Low | nokogiri | 1.19.3 | ||
GHSA-9cv2-cfxc-v4v2 | Low | nokogiri | 1.19.3 | ||
GHSA-23hp-3jrh-7fpw | Unknown | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
GHSA-qffp-2rhf-9h96 | Unknown | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
GHSA-76p8-fhrm-vpc7 | Unknown | azcopy-fips | 10.32.7-r0 | ||
GHSA-23hp-3jrh-7fpw | Unknown | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
GO-2026-5972 | Unknown | azcopy-fips | 10.32.7-r0 | ||
GHSA-vmf3-w455-68vh | Unknown | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
GHSA-83g3-92jg-28cx | Unknown | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
GHSA-vmf3-w455-68vh | Unknown | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
GO-2026-6088 | Unknown | azcopy-fips | 10.32.7-r0 | ||
GO-2026-6089 | Unknown | azcopy-fips | 10.32.7-r0 | ||
CVE-2026-3479 | Unknown | python-3.12 | 3.12.13-r10 | ||
GO-2026-6091 | Unknown | azcopy-fips | 10.32.7-r0 | ||
GHSA-83g3-92jg-28cx | Unknown | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
GHSA-vmf3-w455-68vh | Unknown | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
GHSA-qffp-2rhf-9h96 | Unknown | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
GHSA-34x7-hfp2-rc4v | Unknown | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
GO-2026-6090 | Unknown | azcopy-fips | 10.32.7-r0 | ||
GHSA-8x88-c5mf-7j5w | Unknown | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
GHSA-r6q2-hw4h-h46w | Unknown | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
GHSA-c974-w86c-vpfw | Unknown | azcopy-fips | 10.32.7-r0 | ||
GHSA-qgq7-7hm3-q39j | Unknown | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
GHSA-gvwx-54wh-qm9j | Unknown | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
GHSA-8x88-c5mf-7j5w | Unknown | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
GHSA-w8wr-v893-vjvp | Unknown | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
GHSA-8qq5-rm4j-mr97 | Unknown | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
GHSA-8x88-c5mf-7j5w | Unknown | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
GHSA-9ppj-qmqm-q256 | Unknown | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
GO-2026-6218 | Unknown | azcopy-fips | 10.32.7-r0 | ||
GO-2026-5932 | Unknown | golang.org/x/crypto | v0.54.0 | ||
GHSA-2345-wr3r-cxf2 | Unknown | python-3.12 | 3.12.13-r10 | ||
GHSA-hc8v-wwc9-vgxm | Unknown | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
GHSA-xphw-4f88-5f39 | Unknown | azcopy-fips | 10.32.7-r0 | ||
GHSA-23hp-3jrh-7fpw | Unknown | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
GHSA-gvwx-54wh-qm9j | Unknown | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
GHSA-7qch-w8m5-g3h3 | Unknown | azcopy-fips | 10.32.7-r0 | ||
GHSA-83g3-92jg-28cx | Unknown | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
GHSA-8qq5-rm4j-mr97 | Unknown | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
GO-2026-5932 | Unknown | golang.org/x/crypto | v0.53.0 | ||
GHSA-2345-wr3r-cxf2 | Unknown | python-3.12-base | 3.12.13-r10 | ||
GHSA-9ppj-qmqm-q256 | Unknown | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
GHSA-r6q2-hw4h-h46w | Unknown | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
GHSA-8qq5-rm4j-mr97 | Unknown | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
GHSA-r6q2-hw4h-h46w | Unknown | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
GHSA-w8wr-v893-vjvp | Unknown | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
GHSA-34x7-hfp2-rc4v | Unknown | gitlab-rails-ce-assets-fips-19.2 | 19.2.1-r2 | ||
GHSA-qffp-2rhf-9h96 | Unknown | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
GHSA-qgq7-7hm3-q39j | Unknown | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
GHSA-w8wr-v893-vjvp | Unknown | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
GHSA-xc2p-8ggw-6cr5 | Unknown | azcopy-fips | 10.32.7-r0 | ||
GHSA-34x7-hfp2-rc4v | Unknown | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
GHSA-gvwx-54wh-qm9j | Unknown | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
GHSA-hc8v-wwc9-vgxm | Unknown | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 | ||
GHSA-25mv-j2qr-v5jq | Unknown | azcopy-fips | 10.32.7-r0 | ||
GHSA-9ppj-qmqm-q256 | Unknown | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
GHSA-hc8v-wwc9-vgxm | Unknown | gitlab-rails-ce-doc-fips-19.2 | 19.2.1-r2 | ||
GHSA-qgq7-7hm3-q39j | Unknown | gitlab-rails-ce-fips-19.2 | 19.2.1-r2 |
Last updated:
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.