gitlab-rails-ee-17.1
Chainguard
Status
Impact
Remediating this CVE requires upgrading carrierwave (gem) to version >=2.2.6. Due to the dependent nature of the gems used in GitLab, bumping this may cause compatibility issues with other gems. Pending a fix from upstream. Re: https://docs.gitlab.com/ee/development/rails_update.html
Status