Security Advisories

View the status of known vulnerabilities in a Chainguard Container along with daily updates on security patches. Learn more

Advisory timestamps represent when updates are made to the advisory page, not when they were first detected and triaged by Chainguard. For more on our Security Advisories process see how Chainguard issues advisories.

CGA ID	CVE ID	Severity	Affected package	Status
CGA-w72q-rqmf-cgjj	CVE-2026-54290	High	commercial-gitlab-rails-ee-19.2	Pending upstream fix
CGA-f9xf-p7mr-r2cf	CVE-2026-71849	Low	commercial-gitlab-rails-ee-19.2	Pending upstream fix
CGA-g8mq-6w9j-wr8r	CVE-2026-44455	Medium	commercial-gitlab-rails-ee-19.2	Pending upstream fix
CGA-qxg8-g5hx-gvj9	CVE-2026-71848	Medium	commercial-gitlab-rails-ee-19.2	Pending upstream fix
CGA-xrpq-7qr9-qp3f	CVE-2026-56761	Unknown	commercial-gitlab-rails-ee-19.2	Pending upstream fix
CGA-26m2-v484-vw2w	CVE-2026-47675	Medium	commercial-gitlab-rails-ee-19.2	Pending upstream fix
CGA-rghj-g5h6-89h7	CVE-2026-47676	Medium	commercial-gitlab-rails-ee-19.2	Pending upstream fix
CGA-j2cv-rxvf-57gr	CVE-2026-12143	Unknown	commercial-gitlab-rails-ee-19.2	Pending upstream fix
CGA-r72p-48qp-p27c	CVE-2026-45820	Unknown	commercial-gitlab-rails-ee-19.2	Pending upstream fix
CGA-f4cv-9gj8-979m	CVE-2026-6322	High	commercial-gitlab-rails-ee-19.2	Pending upstream fix
CGA-6fh7-vvfj-8c66	CVE-2026-16221	High	commercial-gitlab-rails-ee-19.2	Pending upstream fix
CGA-c6h5-fvfp-72qc	CVE-2026-6321	High	commercial-gitlab-rails-ee-19.2	Pending upstream fix
CGA-7cvx-ch7p-2v3v	CVE-2026-76172	High	commercial-gitlab-rails-ee-19.2	Pending upstream fix
CGA-xrgf-443j-ph6c	CVE-2026-75975	High	commercial-gitlab-rails-ee-19.2	Pending upstream fix
CGA-q753-3xg9-99vg	CVE-2026-18446	High	commercial-gitlab-rails-ee-19.2	Pending upstream fix
CGA-6w26-33jm-4ffw	CVE-2026-13676	High	commercial-gitlab-rails-ee-19.2	Pending upstream fix

1,162,353 advisories

The trusted source for open source

Talk to an expert

Privacy

Terms

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.

Security Advisories

The trusted source for open source

Product

Solutions

Customers

Resources

Company