CGA-r9vg-53jh-9pr2

Published

Last updated

https://images.chainguard.dev/security/CGA-r9vg-53jh-9pr2

Package

gitlab-rails-ee-17.2

Repository

Chainguard

Latest Update

Pending upstream fix

Aliases

CVE-2024-41110
GHSA-v23v-6jw2-98fq

Severity

9.9

Critical

CVSS V3

References

https://nvd.nist.gov/vuln/detail/CVE-2024-41110
https://github.com/advisories/GHSA-v23v-6jw2-98fq

Updates

Status

Pending upstream fix

Impact

This vulnerability comes from a gem devfile which is linked with go-code in the repo https://gitlab.com/gitlab-org/ruby/gems/devfile-gem that is used for remote workspaces in gitlab, hence we will have to wait for upstream fix.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CGA-r9vg-53jh-9pr2

Severity

References

Updates

The trusted source for open source

Product

Solutions

Customers

Resources

Company