CGA-4fp6-crpg-4659

Published

Last updated

Package

gitlab-runner-fips-17.10

Repository

Chainguard

Latest Update

Pending upstream fix

Aliases

Severity

8.1

High

CVSS V3

Status

Pending upstream fix

Impact

gitlab-runner 17.10.0 uses Docker 25.0.6, as seen here: https://gitlab.com/gitlab-org/gitlab-runner/-/blob/v17.10.0/go.mod\?ref_type\=tags\#L31 The fixed version to remediate this CVE is 26.1.0; however, breaking changes between these major versions require upstream maintainers to implement compatibility.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™