Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CGA-gq3p-h2h4-c88r

published 4 months ago

Summary

No summary available.

What to do

Update chainguard gitlab-rails-ce-fips-19.1 to version 19.1.1-r1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Chainguard	chainguard	gitlab-rails-ce-fips-19.1	< 19.1.1-r1 Fix: upgrade to 19.1.1-r1

Original advisory text

CGA-gq3p-h2h4-c88r

References

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44492.json URL
https://access.redhat.com/errata/RHSA-2026:20889 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:20938 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:27044 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:27063 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:28964 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:29082 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:29197 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:30650 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:30651 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33005 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33155 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33160 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33163 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33173 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33183 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33574 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36108 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-44492 Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44492... Vendor Advisory
https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-44492 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2487938 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:34766 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36754 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36820 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36882 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36883 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36611 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40262 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41031 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41066 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41055 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41064 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41928 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41951 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42078 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42085 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42142 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42146 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42796 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:43052 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:46885 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:46903 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:50300 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57191 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:54188 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60520 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:59833 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66488 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66545 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

8.6 High

Timeline

Published25 Jun 2026

Updated5 Nov 2026

First seen5 Nov 2026

Sources

CGA-gq3p-h2h4-c88r · OSV

Track software like this

Free during beta