{"schemaVersion":3,"id":"CVE-2026-14210","aliases":["CGA-27r5-2g39-q86w","CGA-4xch-3cfh-27r2","CGA-52jc-qc6f-65j3","CGA-6q7h-frw8-684r","CGA-7446-23qw-pfm6","CGA-8mgc-5wcw-x5fc","CGA-9j6h-x2jj-9w4q","CGA-fm9r-vxm3-4g2j","CGA-gqmh-ww53-jf47","CGA-h57v-p7vx-g873","CGA-h829-5mqf-cvp2","CGA-j7gx-hjv7-w38h","CGA-m853-5w52-m8x2","CGA-mv4x-6536-fmh7","CGA-mxrv-663r-54g7","CGA-p489-j9xr-r887","CGA-q4g5-c232-9wgg","CGA-q5pc-395r-x98g","CGA-qwgh-59m8-qpmf","CGA-r624-5jjh-2h8x","CGA-wgrg-6rx7-36v7","CGA-xg58-xpp3-57wf","CGA-22m3-xp84-6863","CGA-29w3-hm2v-gg6w","CGA-2gm6-998m-v2vg","CGA-2h87-x4j9-mvq5","CGA-2p9v-hcv9-5wpx","CGA-2qhq-3g33-x9v2","CGA-2vm5-wqf7-gc45","CGA-2vmv-7q39-fpgc","CGA-32p2-8x37-q864","CGA-49x2-7mpw-79rc","CGA-4c26-745c-h55h","CGA-4ff8-6gmg-2jvq","CGA-4g52-fjr2-wq9m","CGA-4j5p-j2jm-4jq8","CGA-4mq5-vpvg-rjmg","CGA-4p9g-3575-gp7g","CGA-4xcc-jx95-v82q","CGA-54x8-f7ww-6r48","CGA-56cr-m3qx-g5ww","CGA-5grq-8864-56w7","CGA-62p5-227m-3cm7","CGA-64rv-9jg6-qgv4","CGA-6gx5-7wwp-qgrg","CGA-6p9w-5hwr-p8hm","CGA-6vg5-h9hr-r4fc","CGA-79xq-4fv4-2rmm","CGA-7hp8-7gq4-p2rf","CGA-849q-7rj5-mgw7","CGA-89q5-jgvh-mvqr","CGA-8wp6-5924-v8g7","CGA-8x28-q89h-7gr5","CGA-942v-pxgp-9qxq","CGA-95g6-wgmc-m8mj","CGA-9853-57wv-h5h2","CGA-9crc-r5fq-m2x6","CGA-9j95-5h56-282x","CGA-9rpw-fm7f-8gg5","CGA-9w4r-m7xm-w8j6","CGA-9wg8-phm6-rqvr","CGA-9x2c-hjm5-9324","CGA-c2cc-m5p3-rhp4","CGA-c2qr-8w92-wx62","CGA-c457-chmp-rr9q","CGA-c889-rph6-p48v","CGA-cf38-j34x-3fpq","CGA-chcf-p496-vpc4","CGA-cm24-fcpp-p2j5","CGA-cmjp-3gh5-r63f","CGA-fc52-g8c7-xjg4","CGA-g887-wm88-2h85","CGA-gcpq-3mpv-p375","CGA-gm58-2r4j-c64g","CGA-gm9v-x5p8-449m","CGA-gmvc-62j7-jxcw","CGA-gv77-pc3v-mvg7","CGA-gxhq-vxc6-c3pq","CGA-h49p-hp94-94xv","CGA-h7ch-7g96-j3wv","CGA-hp4p-7w83-q3wr","CGA-hr2m-g4qq-9mx5","CGA-hwj7-4qgc-xxh4","CGA-j4f3-3xxf-39x9","CGA-jrmv-46p5-mrf8","CGA-jxv4-h77f-4m7c","CGA-m67h-jxq9-6jmq","CGA-m8j2-2mjf-928f","CGA-m99j-m222-x662","CGA-mxf2-97xv-p924","CGA-p49p-7f5x-3r7f","CGA-q72x-q456-vvw9","CGA-q8mr-v68f-r7gm","CGA-q8v9-m3v8-f8r7","CGA-qh9m-pcg4-5995","CGA-qjxq-hggx-7mqm","CGA-qppg-8248-7xv4","CGA-qr9j-xjg7-7gg5","CGA-r39x-5vx2-qmpr","CGA-r7q5-wf4c-56f9","CGA-rh9p-q779-4hg7","CGA-rxp4-6xqv-6mv3","CGA-v5mw-73p3-4wq9","CGA-v5rq-vx2x-6vqr","CGA-vgr8-wpjj-66gp","CGA-vm75-3ppg-8rmg","CGA-w6pc-rwrg-4v43","CGA-w9w4-728m-63f6","CGA-x9rq-2g28-xxph","CGA-xc7j-8hj4-7xxh","CGA-xfgf-5w5m-cfqc","CGA-xr8m-mm85-h65x","CGA-pwxf-ffwv-vg76","CGA-x8qr-25g6-vx29","CGA-chwc-2m6q-7q59","CGA-h5m5-p439-2jv9","CGA-mpfg-94r3-4m9f","CGA-qx2p-5mf8-h6xp","CGA-x3r7-xgp8-3f5j","CGA-x62j-5hxc-4frc","UBUNTU-CVE-2026-14210"],"status":"published","duplicateOf":null,"title":null,"description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a project-scoped fine-grained Personal Access Token to permanently delete or modify group-level labels, due to incorrect authorization logic on label ownership scope validation.","dates":{"published":"2026-10-13T01:08:41.159Z","modified":"2026-10-14T19:10:51.219Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":4.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":4.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","exploitability":7.2,"impact":2.3,"computed":true}]},"epss":{"probability":0.00219,"percentile":0.11615,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-13T00:00:00.000Z","score":0.0019,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0019,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00181,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00181,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00181,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00219,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00219,"percentile":0.11615}],"last30":[{"date":"2026-10-13T00:00:00.000Z","score":0.0019,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0019,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00181,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00181,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00181,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00219,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00219,"percentile":0.11615}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_9AB5F272DC6F22F2","name":"Exploit Reference (hackerone.com)","source":"reference","url":"https://hackerone.com/reports/3741505","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-1220","name":"Insufficient Granularity of Access Control","description":"The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/1220.html"}],"affected":[{"vendor":"chainguard","product":"gitlab-docker-machine-19.2","name":"gitlab-docker-machine-19.2","label":"gitlab-docker-machine-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-docker-machine-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-docker-machine-19.3","name":"gitlab-docker-machine-19.3","label":"gitlab-docker-machine-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-docker-machine-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-docker-machine-19.4","name":"gitlab-docker-machine-19.4","label":"gitlab-docker-machine-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-docker-machine-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-docker-machine-fips-19.2","name":"gitlab-docker-machine-fips-19.2","label":"gitlab-docker-machine-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-docker-machine-fips-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-docker-machine-fips-19.3","name":"gitlab-docker-machine-fips-19.3","label":"gitlab-docker-machine-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-docker-machine-fips-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-docker-machine-fips-19.4","name":"gitlab-docker-machine-fips-19.4","label":"gitlab-docker-machine-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-docker-machine-fips-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.11","name":"gitlab-rails-ce-18.11","label":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.0","name":"gitlab-rails-ce-19.0","label":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.1","name":"gitlab-rails-ce-19.1","label":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-18.11","name":"gitlab-rails-ce-assets-18.11","label":"gitlab-rails-ce-assets-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-19.0","name":"gitlab-rails-ce-assets-19.0","label":"gitlab-rails-ce-assets-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-19.1","name":"gitlab-rails-ce-assets-19.1","label":"gitlab-rails-ce-assets-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-fips-18.11","name":"gitlab-rails-ce-assets-fips-18.11","label":"gitlab-rails-ce-assets-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-fips-19.0","name":"gitlab-rails-ce-assets-fips-19.0","label":"gitlab-rails-ce-assets-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-fips-19.1","name":"gitlab-rails-ce-assets-fips-19.1","label":"gitlab-rails-ce-assets-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-doc-18.11","name":"gitlab-rails-ce-doc-18.11","label":"gitlab-rails-ce-doc-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-doc-19.0","name":"gitlab-rails-ce-doc-19.0","label":"gitlab-rails-ce-doc-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-doc-19.1","name":"gitlab-rails-ce-doc-19.1","label":"gitlab-rails-ce-doc-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-doc-fips-18.11","name":"gitlab-rails-ce-doc-fips-18.11","label":"gitlab-rails-ce-doc-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-fips-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-doc-fips-19.0","name":"gitlab-rails-ce-doc-fips-19.0","label":"gitlab-rails-ce-doc-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-fips-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-doc-fips-19.1","name":"gitlab-rails-ce-doc-fips-19.1","label":"gitlab-rails-ce-doc-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.11","name":"gitlab-rails-ce-fips-18.11","label":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.0","name":"gitlab-rails-ce-fips-19.0","label":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.1","name":"gitlab-rails-ce-fips-19.1","label":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-19.2","name":"gitlab-runner-19.2","label":"gitlab-runner-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-19.3","name":"gitlab-runner-19.3","label":"gitlab-runner-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-19.4","name":"gitlab-runner-19.4","label":"gitlab-runner-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-fips-19.2","name":"gitlab-runner-fips-19.2","label":"gitlab-runner-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-fips-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-fips-19.3","name":"gitlab-runner-fips-19.3","label":"gitlab-runner-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-fips-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-fips-19.4","name":"gitlab-runner-fips-19.4","label":"gitlab-runner-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-fips-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-19.2","name":"gitlab-runner-helper-19.2","label":"gitlab-runner-helper-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-19.3","name":"gitlab-runner-helper-19.3","label":"gitlab-runner-helper-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-19.4","name":"gitlab-runner-helper-19.4","label":"gitlab-runner-helper-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-compat-19.2","name":"gitlab-runner-helper-compat-19.2","label":"gitlab-runner-helper-compat-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-compat-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-compat-19.3","name":"gitlab-runner-helper-compat-19.3","label":"gitlab-runner-helper-compat-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-compat-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-compat-19.4","name":"gitlab-runner-helper-compat-19.4","label":"gitlab-runner-helper-compat-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-compat-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-compat-fips-19.2","name":"gitlab-runner-helper-compat-fips-19.2","label":"gitlab-runner-helper-compat-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-compat-fips-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-compat-fips-19.3","name":"gitlab-runner-helper-compat-fips-19.3","label":"gitlab-runner-helper-compat-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-compat-fips-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-compat-fips-19.4","name":"gitlab-runner-helper-compat-fips-19.4","label":"gitlab-runner-helper-compat-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-compat-fips-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-fips-19.2","name":"gitlab-runner-helper-fips-19.2","label":"gitlab-runner-helper-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-fips-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-fips-19.3","name":"gitlab-runner-helper-fips-19.3","label":"gitlab-runner-helper-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-fips-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-fips-19.4","name":"gitlab-runner-helper-fips-19.4","label":"gitlab-runner-helper-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-fips-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-oci-entrypoint-19.2","name":"gitlab-runner-helper-oci-entrypoint-19.2","label":"gitlab-runner-helper-oci-entrypoint-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-oci-entrypoint-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-oci-entrypoint-19.3","name":"gitlab-runner-helper-oci-entrypoint-19.3","label":"gitlab-runner-helper-oci-entrypoint-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-oci-entrypoint-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-oci-entrypoint-19.4","name":"gitlab-runner-helper-oci-entrypoint-19.4","label":"gitlab-runner-helper-oci-entrypoint-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-oci-entrypoint-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-oci-entrypoint-fips-19.2","name":"gitlab-runner-helper-oci-entrypoint-fips-19.2","label":"gitlab-runner-helper-oci-entrypoint-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-oci-entrypoint-fips-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-oci-entrypoint-fips-19.3","name":"gitlab-runner-helper-oci-entrypoint-fips-19.3","label":"gitlab-runner-helper-oci-entrypoint-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-oci-entrypoint-fips-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-oci-entrypoint-fips-19.4","name":"gitlab-runner-helper-oci-entrypoint-fips-19.4","label":"gitlab-runner-helper-oci-entrypoint-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-oci-entrypoint-fips-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-oci-entrypoint-19.2","name":"gitlab-runner-oci-entrypoint-19.2","label":"gitlab-runner-oci-entrypoint-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-oci-entrypoint-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-oci-entrypoint-19.3","name":"gitlab-runner-oci-entrypoint-19.3","label":"gitlab-runner-oci-entrypoint-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-oci-entrypoint-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-oci-entrypoint-19.4","name":"gitlab-runner-oci-entrypoint-19.4","label":"gitlab-runner-oci-entrypoint-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-oci-entrypoint-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-oci-entrypoint-fips-19.2","name":"gitlab-runner-oci-entrypoint-fips-19.2","label":"gitlab-runner-oci-entrypoint-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-oci-entrypoint-fips-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-oci-entrypoint-fips-19.3","name":"gitlab-runner-oci-entrypoint-fips-19.3","label":"gitlab-runner-oci-entrypoint-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-oci-entrypoint-fips-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-oci-entrypoint-fips-19.4","name":"gitlab-runner-oci-entrypoint-fips-19.4","label":"gitlab-runner-oci-entrypoint-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-oci-entrypoint-fips-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.11","name":"gitlab-workhorse-ce-18.11","label":"gitlab-workhorse-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-19.0","name":"gitlab-workhorse-ce-19.0","label":"gitlab-workhorse-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-19.1","name":"gitlab-workhorse-ce-19.1","label":"gitlab-workhorse-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.11","name":"gitlab-workhorse-ce-fips-18.11","label":"gitlab-workhorse-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-19.0","name":"gitlab-workhorse-ce-fips-19.0","label":"gitlab-workhorse-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-19.1","name":"gitlab-workhorse-ce-fips-19.1","label":"gitlab-workhorse-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-docker-machine-19.2","name":"gitlab-docker-machine-19.2","label":"gitlab-docker-machine-19.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-docker-machine-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-docker-machine-19.3","name":"gitlab-docker-machine-19.3","label":"gitlab-docker-machine-19.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-docker-machine-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-runner-19.2","name":"gitlab-runner-19.2","label":"gitlab-runner-19.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-runner-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-runner-19.3","name":"gitlab-runner-19.3","label":"gitlab-runner-19.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-runner-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-runner-helper-19.2","name":"gitlab-runner-helper-19.2","label":"gitlab-runner-helper-19.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-runner-helper-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-runner-helper-19.3","name":"gitlab-runner-helper-19.3","label":"gitlab-runner-helper-19.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-runner-helper-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-runner-helper-compat-19.2","name":"gitlab-runner-helper-compat-19.2","label":"gitlab-runner-helper-compat-19.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-runner-helper-compat-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-runner-helper-compat-19.3","name":"gitlab-runner-helper-compat-19.3","label":"gitlab-runner-helper-compat-19.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-runner-helper-compat-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-runner-helper-oci-entrypoint-19.2","name":"gitlab-runner-helper-oci-entrypoint-19.2","label":"gitlab-runner-helper-oci-entrypoint-19.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-runner-helper-oci-entrypoint-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-runner-helper-oci-entrypoint-19.3","name":"gitlab-runner-helper-oci-entrypoint-19.3","label":"gitlab-runner-helper-oci-entrypoint-19.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-runner-helper-oci-entrypoint-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-runner-oci-entrypoint-19.2","name":"gitlab-runner-oci-entrypoint-19.2","label":"gitlab-runner-oci-entrypoint-19.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-runner-oci-entrypoint-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-runner-oci-entrypoint-19.3","name":"gitlab-runner-oci-entrypoint-19.3","label":"gitlab-runner-oci-entrypoint-19.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-runner-oci-entrypoint-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"gitlab","name":"gitlab","label":"gitlab","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/gitlab","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"gitlab","product":"gitlab","name":"gitlab","label":"gitlab","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 18.11, < 19.2.8","noFixRecorded":false,"fixedIn":null},{"text":"≥ 19.3, < 19.3.5","noFixRecorded":false,"fixedIn":null},{"text":"≥ 19.4, < 19.4.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 18.11.0, < 19.2.8","noFixRecorded":false,"fixedIn":null},{"text":"≥ 19.3.0, < 19.3.5","noFixRecorded":false,"fixedIn":null},{"text":"≥ 19.4.0, < 19.4.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 18.11, < 19.2.8 | ≥ 19.3, < 19.3.5 | ≥ 19.4, < 19.4.2 | ≥ 18.11.0, < 19.2.8 | ≥ 19.3.0, < 19.3.5 | ≥ 19.4.0, < 19.4.2","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"gitlab","label":"GitLab","category":"server-app"}},"hubHref":"/vendor/gitlab/gitlab"}],"affectedCount":74,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","hostname":"docs.gitlab.com","tags":["Release Notes","Vendor Advisory","REPORT"]},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/604538","label":"gitlab.com/gitlab-org/gitlab/-/work_items/604538","hostname":"gitlab.com","tags":["Issue Tracking","REPORT"]},{"url":"https://hackerone.com/reports/3741505","label":"hackerone.com/reports/3741505","hostname":"hackerone.com","tags":["Technical Description","Exploit","Permissions Required","REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-14210","label":"ubuntu.com/security/CVE-2026-14210","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-14210","label":"www.cve.org/CVERecord?id=CVE-2026-14210","hostname":"www.cve.org","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-13T01:08:41.159Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-14T19:10:51.219Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":27,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T11:56:31.635Z","stale":false,"partial":false}}