Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CGA-h539-39pp-gvw3

published 4 months ago

Summary

No summary available.

What to do

Update chainguard gitlab-rails-ce-19.0 to version 19.0.10-r0.

Affected software

Ecosystem	Vendor	Product	Affected versions
Chainguard	chainguard	gitlab-rails-ce-19.0	< 19.0.10-r0 Fix: upgrade to 19.0.10-r0

Original advisory text

CGA-h539-39pp-gvw3

References

https://github.com/axios/axios/releases/tag/v0.30.3 URL
https://github.com/axios/axios/releases/tag/v1.13.5 URL
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25639... Vendor Advisory
https://github.com/axios/axios/security/advisories/GHSA-43fc-jf86-j433 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-25639 Vendor Advisory
https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57 Patch
https://github.com/axios/axios/commit/d7ff1409c68168d3057fc3891f911b2b92616f9e Patch
https://github.com/axios/axios/pull/7369 Patch
https://github.com/axios/axios/pull/7388 Patch
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25639.json URL
https://access.redhat.com/errata/RHSA-2026:10184 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:11414 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13542 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13548 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19712 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:25041 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:2694 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3087 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3105 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3106 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3107 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3109 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:4942 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:5142 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:5168 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:5174 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:5633 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:5636 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:5665 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:5807 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6170 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6174 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6192 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6277 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6308 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6309 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6428 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6497 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6567 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6568 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6802 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:7249 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:8218 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:8229 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:8499 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:8500 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:8501 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:9848 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-25639 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2438237 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:36882 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41064 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Timeline

Published24 Jun 2026

Updated24 Oct 2026

First seen24 Oct 2026

Sources

CGA-h539-39pp-gvw3 · OSV

Track software like this

Free during beta