Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CGA-mxj6-776w-4568

published 4 months ago

Summary

No summary available.

What to do

Update chainguard gitlab-rails-ce-18.10 to version 18.10.8-r8.

Affected software

Ecosystem	Vendor	Product	Affected versions
Chainguard	chainguard	gitlab-rails-ce-18.10	< 18.10.8-r8 Fix: upgrade to 18.10.8-r8

Original advisory text

CGA-mxj6-776w-4568

References

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44487.json URL
https://access.redhat.com/errata/RHSA-2026:20889 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:20938 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:27044 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:27063 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:28964 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:29082 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:29197 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:29864 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:30650 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:30651 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33155 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33160 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33163 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33173 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33183 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33574 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:34374 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:34525 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:34527 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:34530 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-44487 Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44487... Vendor Advisory
https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-44487 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2487948 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:36754 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36820 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36882 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36883 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36611 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40262 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41031 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41066 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41055 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41064 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40768 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40792 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40795 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41928 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41951 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42078 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42085 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42142 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42146 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42796 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:43052 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:46885 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:46903 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:50300 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57191 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:54188 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:54206 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60520 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66488 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66545 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

8.3 High

Timeline

Published1 Jul 2026

Updated30 Oct 2026

First seen30 Oct 2026

Sources

CGA-mxj6-776w-4568 · OSV

Track software like this

Free during beta