Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CGA-g5f9-qv7w-9hxw

published 5 months ago

Summary

No summary available.

What to do

Update chainguard gitlab-workhorse-ce-18.9 to version 18.9.8-r12.

Affected software

Ecosystem	Vendor	Product	Affected versions
Chainguard	chainguard	gitlab-workhorse-ce-18.9	< 18.9.8-r12 Fix: upgrade to 18.9.8-r12

Original advisory text

CGA-g5f9-qv7w-9hxw

References

https://go.dev/cl/781640 URL
https://go.dev/cl/781664 URL
https://go.dev/issue/79564 URL
https://groups.google.com/g/golang-announce/c/a082jnz-LvI URL
https://pkg.go.dev URL
https://pkg.go.dev/vuln/GO-2026-5017 URL
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39830.json URL
https://access.redhat.com/errata/RHSA-2026:29455 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:35833 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-39830 Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39830... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-39830 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2480684 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:36199 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36207 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36319 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36625 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36648 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36651 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36796 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36797 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36808 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37072 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37268 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37271 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37272 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37275 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37278 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37286 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37296 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37387 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40118 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40262 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40969 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40974 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40945 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40972 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41019 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41031 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41036 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41066 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42146 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42796 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:43052 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:43692 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:46885 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:47735 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:48151 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:49944 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51033 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:52857 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:52910 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:54400 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:54531 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57194 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57801 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:59467 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60520 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:61314 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

9.1 Critical

Timeline

Published27 May 2026

Updated11 Sep 2026

First seen11 Sep 2026

Sources

CGA-g5f9-qv7w-9hxw · OSV

Track software like this

Free during beta