Package
gitlab-rails-ce-fips-19.3
Component
css_parser
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
This vulnerability relates to the GitLab gem dependency css_parser, whose version is constrained by GitLab's Gemfile (transitive via premailer, pinned by premailer's own constraint); the fixed release 1.22.0 / 3.0.0 is outside that constraint and bundle update --conservative cannot select it. GitLab advises that maintainers should not upgrade gem dependency versions manually outside the Gemfile. Resolution requires upstream GitLab to raise the constraint in a new release.
Status