{"schemaVersion":3,"id":"CVE-2025-68458","aliases":["UBUNTU-CVE-2025-68458","DEBIAN-CVE-2025-68458","CGA-299p-9247-gv8p","CGA-2g88-v78p-3ff7","CGA-2vj5-c2fj-3r7r","CGA-4gfm-fwxf-m77w","CGA-4q3f-mwv9-m593","CGA-75v3-9p6x-f4w5","CGA-7m9r-qq3v-w423","CGA-889q-28g6-jf5p","CGA-8r32-pc52-vc6v","CGA-9w7q-m8f4-8crr","CGA-9wjj-64jq-93m3","CGA-cj86-32wx-32h7","CGA-gf7w-7qpm-65gx","CGA-gfrj-5fm3-vfj5","CGA-hrq6-q323-3rmq","CGA-j8wv-p2vm-rp34","CGA-mwv2-v2wj-q996","CGA-phj2-586f-ccf4","CGA-r7r9-7xxr-vgg2","CGA-rh62-m68q-v3mr","CGA-w6p2-cf2w-45g5","CGA-wwcq-6q3c-fjfm","CGA-wxcp-4hfr-h5rp","CGA-wxgq-qj49-832w","GHSA-8fgc-7cc6-rx7x","CGA-228r-v32f-hv5m","CGA-248q-h8x5-wrxg","CGA-2f6w-234j-9qqf","CGA-2mgx-g3m8-fj68","CGA-2wh2-j8qx-3357","CGA-336c-mx9f-p628","CGA-33h3-5pxj-rj48","CGA-39f3-vjw7-36cm","CGA-42gh-2p3f-fc5x","CGA-4835-2v3j-2qpm","CGA-4c8c-cmj8-q3q3","CGA-4qw5-3w4w-gfr9","CGA-5mvc-vvqm-gg93","CGA-5pv4-3r4p-rvwh","CGA-6g55-c83h-h8q6","CGA-74hv-fgf6-whmq","CGA-79pc-vf96-74c2","CGA-8275-r93h-3qf9","CGA-8488-xx9x-x74m","CGA-86v7-qfhq-g86v","CGA-95mq-rp3f-559m","CGA-99xp-f747-5xcq","CGA-cwr9-jwg9-2q6w","CGA-f54g-vf4w-6rmw","CGA-fj58-j56m-326c","CGA-fmvg-8mm9-pw46","CGA-fq5x-wwjg-q722","CGA-fv58-xfr7-g9p5","CGA-g4vm-wxq9-hmc2","CGA-gfq3-p4gr-r43c","CGA-gp8r-625m-mrqm","CGA-gxvc-ph45-pqwv","CGA-h8gj-xvhq-3w77","CGA-hc6w-3x8q-69qf","CGA-hf24-97qr-m3pm","CGA-hqm7-vx42-m856","CGA-j2h6-hqj3-8gpf","CGA-j46p-r592-2hfq","CGA-mprg-qgpm-vv73","CGA-mqc6-7cwj-8cvx","CGA-p2f5-jw39-8wmc","CGA-p8mq-xq96-4gg8","CGA-p94r-hp2c-vg8f","CGA-pjhx-2xg4-pq8w","CGA-pqx5-p85w-g29j","CGA-pwjf-rr47-pgwf","CGA-q2rh-mvhx-grj9","CGA-q2vx-fgq2-q65c","CGA-q374-hp3m-6wg6","CGA-q427-ww5g-49rp","CGA-qf38-rv7q-v49q","CGA-qgxv-q6g8-xmr6","CGA-qhhj-wxcw-6xx6","CGA-qmjw-63m3-fq9q","CGA-r8m3-88jv-fv9r","CGA-rf36-28hx-jm3q","CGA-rq97-gjm7-m3mw","CGA-rwqq-3cqr-5qx9","CGA-rxv8-wm35-9395","CGA-v8hm-29xv-52x4","CGA-vcwc-6xcc-wx88","CGA-vh2j-86p9-hmrh","CGA-vjpv-mqw4-m9fc","CGA-vw8g-mhrf-675r","CGA-w7gr-qrj7-cqm5","CGA-wj9r-ghj4-q955","CGA-wm9c-26g9-2jg2","CGA-x3g2-5635-pr69","CGA-x6g2-9p68-4rwx","CGA-xx9p-pqg3-j5x9"],"status":"published","duplicateOf":null,"title":null,"description":"Webpack is a module bundler. From version 5.49.0 to before 5.104.1, when experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) can be bypassed to fetch resources from hosts outside allowedUris by using crafted URLs that include userinfo (username:password@host). If allowedUris enforcement relies on a raw string prefix check (e.g., uri.startsWith(allowed)), a URL that looks allow-listed can pass validation while the actual network request is sent to a different authority/host after URL parsing. This is a policy/allow-list bypass that enables build-time SSRF behavior (outbound requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion (the fetched response is treated as module source and bundled). This issue has been patched in version 5.104.1.","dates":{"published":"2026-02-05T23:08:01.102Z","modified":"2026-02-06T20:26:59.798Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":3.7,"severity":"low","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","exploitability":3.1,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","exploitability":3.1,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","exploitability":3.1,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","exploitability":3.1,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","exploitability":3.1,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00233,"percentile":0.13302,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.025000000000000022,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00208},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00233,"percentile":0.13302}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00212,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00233,"percentile":0.13302}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_WEBPACK_WEBPACK","name":"Webpack","source":"github","url":"https://github.com/webpack/webpack/security/advisories/GHSA-4vvj-4cpr-p986","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-918","name":"Server-Side Request Forgery (SSRF)","description":"The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/918.html"}],"affected":[{"vendor":"chainguard","product":"arangodb-3.11","name":"arangodb-3.11","label":"arangodb-3.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/arangodb-3.11","purlType":"apk","versions":[{"text":"< 3.11.14.5-r19","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.11.14.5-r19","eol":null,"hubHref":null},{"vendor":"chainguard","product":"arangodb-3.12","name":"arangodb-3.12","label":"arangodb-3.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/arangodb-3.12","purlType":"apk","versions":[{"text":"< 3.12.9.4-r34","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.9.4-r34","eol":null,"hubHref":null},{"vendor":"chainguard","product":"drupal-11.3","name":"drupal-11.3","label":"drupal-11.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/drupal-11.3","purlType":"apk","versions":[{"text":"< 11.3.13-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.3.13-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.10","name":"gitlab-rails-ce-18.10","label":"gitlab-rails-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.11","name":"gitlab-rails-ce-18.11","label":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.5","name":"gitlab-rails-ce-18.5","label":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.0","name":"gitlab-rails-ce-19.0","label":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0","purlType":"apk","versions":[{"text":"< 19.0.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.1","name":"gitlab-rails-ce-19.1","label":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1","purlType":"apk","versions":[{"text":"< 19.1.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.2","name":"gitlab-rails-ce-19.2","label":"gitlab-rails-ce-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.2","purlType":"apk","versions":[{"text":"< 19.2.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.3","name":"gitlab-rails-ce-19.3","label":"gitlab-rails-ce-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.3","purlType":"apk","versions":[{"text":"< 19.3.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.1-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"< 18.1.6-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.1.6-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.10","name":"gitlab-rails-ce-fips-18.10","label":"gitlab-rails-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.10","purlType":"apk","versions":[{"text":"< 18.10.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.10.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.11","name":"gitlab-rails-ce-fips-18.11","label":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11","purlType":"apk","versions":[{"text":"< 18.11.12-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.12-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.5","name":"gitlab-rails-ce-fips-18.5","label":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.9","name":"gitlab-rails-ce-fips-18.9","label":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9","purlType":"apk","versions":[{"text":"< 18.9.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.0","name":"gitlab-rails-ce-fips-19.0","label":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0","purlType":"apk","versions":[{"text":"< 19.0.9-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.9-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.1","name":"gitlab-rails-ce-fips-19.1","label":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1","purlType":"apk","versions":[{"text":"< 19.1.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-earlystopping","name":"katib-earlystopping","label":"katib-earlystopping","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-earlystopping","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-goptuna-compat","name":"katib-suggestion-goptuna-compat","label":"katib-suggestion-goptuna-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-goptuna-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-hyperband","name":"katib-suggestion-hyperband","label":"katib-suggestion-hyperband","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-hyperband","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-hyperopt","name":"katib-suggestion-hyperopt","label":"katib-suggestion-hyperopt","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-hyperopt","purlType":"apk","versions":[{"text":"< 0.19.0-r40","noFixRecorded":false,"fixedIn":null},{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r40 | < 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-nas-darts","name":"katib-suggestion-nas-darts","label":"katib-suggestion-nas-darts","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-nas-darts","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-nas-enas","name":"katib-suggestion-nas-enas","label":"katib-suggestion-nas-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-nas-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-optuna-enas","name":"katib-suggestion-optuna-enas","label":"katib-suggestion-optuna-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-optuna-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-pbt-enas","name":"katib-suggestion-pbt-enas","label":"katib-suggestion-pbt-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-pbt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-skopt-enas","name":"katib-suggestion-skopt-enas","label":"katib-suggestion-skopt-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-skopt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-tfevent-metricscollector","name":"katib-tfevent-metricscollector","label":"katib-tfevent-metricscollector","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-tfevent-metricscollector","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-2","name":"langfuse-2","label":"langfuse-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-2","purlType":"apk","versions":[{"text":"< 2.95.12-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.95.12-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-2-worker","name":"langfuse-2-worker","label":"langfuse-2-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-2-worker","purlType":"apk","versions":[{"text":"< 2.95.12-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.95.12-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3","name":"langfuse-3","label":"langfuse-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3","purlType":"apk","versions":[{"text":"< 3.155.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.155.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.155.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.155.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-2","name":"langfuse-fips-2","label":"langfuse-fips-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-2","purlType":"apk","versions":[{"text":"< 2.95.12-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.95.12-r14","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-2-worker","name":"langfuse-fips-2-worker","label":"langfuse-fips-2-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-2-worker","purlType":"apk","versions":[{"text":"< 2.95.12-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.95.12-r14","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3","name":"langfuse-fips-3","label":"langfuse-fips-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3","purlType":"apk","versions":[{"text":"< 3.155.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.155.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3-worker","name":"langfuse-fips-3-worker","label":"langfuse-fips-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3-worker","purlType":"apk","versions":[{"text":"< 3.155.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.155.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3.152","name":"langfuse-fips-3.152","label":"langfuse-fips-3.152","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3.152","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3.152-worker","name":"langfuse-fips-3.152-worker","label":"langfuse-fips-3.152-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3.152-worker","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"librechat","name":"librechat","label":"librechat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/librechat","purlType":"apk","versions":[{"text":"< 0.8.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.8.2-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-earlystopping","name":"katib-earlystopping","label":"katib-earlystopping","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-earlystopping","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-goptuna-compat","name":"katib-suggestion-goptuna-compat","label":"katib-suggestion-goptuna-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-goptuna-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-hyperband","name":"katib-suggestion-hyperband","label":"katib-suggestion-hyperband","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-hyperband","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-hyperopt","name":"katib-suggestion-hyperopt","label":"katib-suggestion-hyperopt","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-hyperopt","purlType":"apk","versions":[{"text":"< 0.19.0-r40","noFixRecorded":false,"fixedIn":null},{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r40 | < 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-nas-darts","name":"katib-suggestion-nas-darts","label":"katib-suggestion-nas-darts","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-nas-darts","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-nas-enas","name":"katib-suggestion-nas-enas","label":"katib-suggestion-nas-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-nas-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-optuna-enas","name":"katib-suggestion-optuna-enas","label":"katib-suggestion-optuna-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-optuna-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-pbt-enas","name":"katib-suggestion-pbt-enas","label":"katib-suggestion-pbt-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-pbt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-skopt-enas","name":"katib-suggestion-skopt-enas","label":"katib-suggestion-skopt-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-skopt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-tfevent-metricscollector","name":"katib-tfevent-metricscollector","label":"katib-tfevent-metricscollector","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-tfevent-metricscollector","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3","name":"langfuse-3","label":"langfuse-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3","purlType":"apk","versions":[{"text":"< 3.155.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.155.1-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.155.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.155.1-r2","eol":null,"hubHref":null},{"vendor":"debian","product":"node-webpack","name":"node-webpack","label":"node-webpack","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-webpack","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 5.105.4+dfsg1+~cs15.13.23-2","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 5.105.4+dfsg1+~cs15.13.23-2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-webpack","name":"node-webpack","label":"node-webpack","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-webpack","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"Npm","product":"webpack","name":"webpack","label":"webpack","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/webpack","purlType":"npm","versions":[{"text":"≥ 5.49.0, < 5.104.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.49.0, < 5.104.1","eol":null,"hubHref":null},{"vendor":"webpack","product":"webpack","name":"webpack","label":"webpack","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 5.49.0, < 5.104.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.49.0, < 5.104.1","eol":null,"hubHref":"/vendor/webpack/webpack"},{"vendor":"webpack.js","product":"webpack","name":"webpack","label":"webpack","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 5.49.0, < 5.104.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.49.0, < 5.104.1","eol":null,"hubHref":"/vendor/webpackjs/webpack"}],"affectedCount":63,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/webpack/webpack/security/advisories/GHSA-8fgc-7cc6-rx7x","label":"github.com/webpack/webpack/security/advisories/GHSA-8fgc-7cc6-rx7x","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Exploit","Vendor Advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-68458","label":"ubuntu.com/security/CVE-2025-68458","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68458","label":"www.cve.org/CVERecord?id=CVE-2025-68458","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-68458","label":"security-tracker.debian.org/tracker/CVE-2025-68458","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68458.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68458.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68458","label":"nvd.nist.gov/vuln/detail/CVE-2025-68458","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/webpack/webpack","label":"github.com/webpack/webpack","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-GGMQ-FXF9-WG67"]},"timeline":[{"kind":"published","date":"2026-02-05T23:08:01.102Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-06T20:26:59.798Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":25,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T01:52:49.952Z","stale":false,"partial":false}}