Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CGA-87pw-85qc-wjg4

published 1 month ago

Summary

No summary available.

What to do

Update chainguard commercial-gitlab-rails-ee-fips-19.2 to version 19.2.7-r1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Chainguard	chainguard	commercial-gitlab-rails-ee-fips-19.2	< 19.2.7-r1 Fix: upgrade to 19.2.7-r1

Original advisory text

CGA-87pw-85qc-wjg4

References

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12143.json URL
https://www.npmjs.com/package/form-data URL
https://access.redhat.com/errata/RHSA-2026:33155 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33160 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33163 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33173 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33183 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:34342 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36319 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36625 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36754 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-12143 Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/12xxx/CVE-2026-12143... Vendor Advisory
https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-12143 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2488480 Third Party Advisory
https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf51... Patch
https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38... Patch
https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf... Patch
https://github.com/form-data/form-data Product
https://cwe.mitre.org/data/definitions/93.html Third Party Advisory
https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipar... Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:40262 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41031 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41066 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41928 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41929 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41951 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42146 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42796 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:43052 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:44267 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:44263 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:48124 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:48151 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:48693 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:50300 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:54770 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:56338 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:56366 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:56431 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57013 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57590 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57545 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57801 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:59136 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:59153 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:59155 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:59556 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:59557 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:59558 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:59559 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:59579 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60387 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60388 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60389 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60390 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60391 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60520 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60477 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60446 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:62260 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:63355 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:63373 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:63047 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66003 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66488 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66545 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

8.3 High

Timeline

Published9 Sep 2026

Updated9 Oct 2026

First seen9 Oct 2026

Sources

CGA-87pw-85qc-wjg4 · OSV

Track software like this

Free during beta