Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
10.0
CGA-hv35-cvx3-5qm6
published 21 days ago
Summary
No summary available.
What to do
- Update chainguard gitlab-runner-19.3 to version 19.3.5-r0.
- Update wolfi gitlab-runner-19.3 to version 19.3.5-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | gitlab-runner-19.3 |
< 19.3.5-r0 Fix: upgrade to 19.3.5-r0
|
| Wolfi | wolfi | gitlab-runner-19.3 |
< 19.3.5-r0 Fix: upgrade to 19.3.5-r0
|
Original advisory text
CGA-hv35-cvx3-5qm6
References
- https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/ URL
- https://gitlab.com/gitlab-org/gitlab/-/work_items/630686 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97229... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-97229 Vendor Advisory
- https://hackerone.com/reports/4055749 Third Party Advisory
- https://hackerone.com/reports/4058589 Third Party Advisory
- https://gitlab.com/gitlab-org/gitlab Product
Severity
10.0
Critical
Timeline
Published14 Oct 2026
Updated29 Oct 2026
First seen15 Oct 2026
Sources
CGA-hv35-cvx3-5qm6 · OSV
Track software like this
Free during beta