CGA-53jg-79p6-828j

Published

Last updated

https://images.chainguard.dev/security/CGA-53jg-79p6-828j

Package

gitlab-cng-17.1

Repository

Chainguard

Latest Update

Fix not planned

Aliases

CVE-2024-45614
GHSA-9hf4-67fc-4vf4

Severity

5.4

Medium

CVSS V3

References

https://nvd.nist.gov/vuln/detail/CVE-2024-45614
https://github.com/advisories/GHSA-9hf4-67fc-4vf4

Updates

Status

Fix not planned

Impact

This vulnerability relates to the GitLab dependency: 'puma', which appears to be addressed in versions v5.6.9 and v6.4.3. At the time of writing, GitLab have not issued an update with this fix. This version of GitLab is also end-of-life, and GitLab are no longer supporting this release with additional fixes.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CGA-53jg-79p6-828j

Severity

References

Updates

The trusted source for open source

Product

Solutions

Customers

Resources

Company