{"schemaVersion":3,"id":"CVE-2026-22860","aliases":["UBUNTU-CVE-2026-22860","DEBIAN-CVE-2026-22860","CGA-4jjq-h46w-8g9m","CGA-4ph6-m76c-3p28","CGA-5f62-p65q-2p4w","CGA-5hq7-4v94-fpxq","CGA-6frq-mwx7-pc3r","CGA-6h2h-93xg-hm9r","CGA-6j2f-8pfp-g484","CGA-7wvh-fh8f-6fpp","CGA-848r-2cgw-xv55","CGA-8h3v-5v6r-2945","CGA-cp76-frj6-f7q6","CGA-fqc3-fc28-wm47","CGA-g797-f55w-82cm","CGA-hhqh-2p7q-pcqr","CGA-j5cj-q38v-5xqg","CGA-p26p-97p2-7hhh","CGA-prxp-98w2-cxhj","CGA-qhf9-gjpf-4fvm","CGA-rcfw-29q8-w5ph","CGA-rp47-3j7v-rjqr","CGA-rr6v-8fgf-pxc5","CGA-rvmc-8h38-pcq9","CGA-vfx3-469h-3hfh","CGA-x4rp-42hr-585r","CGA-2h9j-5472-2pvm","CGA-2q76-9jgx-vxgf","CGA-2x8m-6339-mwfr","CGA-39mp-2gpf-75jj","CGA-3c9g-fgr9-8xp6","CGA-3fxg-hfv5-7pmx","CGA-3qhg-h28v-w952","CGA-4p27-8jg8-5jxw","CGA-54pm-wgwx-j573","CGA-5c8r-7g39-w5pv","CGA-5fgh-fvw6-p5jp","CGA-5m7x-66j7-jm7q","CGA-5wfp-5q8r-fg7f","CGA-65rf-vwv6-wpqx","CGA-6m99-3pwc-wc9w","CGA-733g-8f6p-696g","CGA-759x-r3f4-2638","CGA-7gvw-xrg8-hphg","CGA-7m73-xw3x-75jw","CGA-7r2f-vcqq-mr4w","CGA-7x7j-hjc8-hc6v","CGA-7xm4-q2xv-jfx2","CGA-829h-xrfp-j2fx","CGA-829j-hww9-g8wg","CGA-8g42-q7q5-v697","CGA-8qw2-3v7f-6pm9","CGA-8wf4-hg6g-w2p8","CGA-98mx-m926-p5v7","CGA-9f7r-wc9m-5vfj","CGA-9vh5-w5v2-49mc","CGA-c2p3-p4mf-g857","CGA-c3hx-fww4-979w","CGA-c6mr-mmrx-qfrc","CGA-cf5p-734j-68j9","CGA-cfh8-w7xr-hwwj","CGA-cj43-9xjm-8rc9","CGA-cmvf-38rq-9r22","CGA-cp5m-x2wh-q732","CGA-cxfx-g8cr-mxfx","CGA-f4qh-cchc-wjcf","CGA-f5px-8827-49j7","CGA-fh7w-7gcm-6p4m","CGA-fmvw-27mg-234x","CGA-frfv-8hwc-r647","CGA-g2w5-wmhg-g83h","CGA-gcr2-8jmj-q575","CGA-ghqg-qp59-35m4","CGA-gj6c-xc83-h4pj","CGA-gr9g-p5f2-gvqg","CGA-h5q5-gh65-8j2g","CGA-hqq8-x358-2pw7","CGA-hx5g-c3f3-76m6","CGA-j5gm-qmp4-89v2","CGA-j838-wf79-7gpw","CGA-j8gm-hw85-f78h","CGA-jcgv-hmpj-vvgw","CGA-jf3w-46cg-3x24","CGA-jf6v-cfjj-pqv4","CGA-jpxm-pvp3-vj8v","CGA-m29g-3hp4-324v","CGA-mgg6-jjx5-89mq","CGA-mgrm-jjm2-6c44","CGA-mqm7-gj98-rh29","CGA-mw63-mpp8-346x","CGA-p2wm-8h8v-rjqc","CGA-pcjf-cxhq-mgj6","CGA-pjph-wrcc-8vc5","CGA-pm23-mm6c-hhf7","CGA-pmfw-h4w7-qx2j","CGA-prxv-hwg6-3vv8","GHSA-mxw3-3hh2-x2mh","CGA-q2qf-r7p7-69xx","CGA-q3x7-hfvq-mq8m","CGA-q56q-6cr5-p9rv","CGA-q768-m9j5-5vgg","CGA-q94v-3xm3-83qp","CGA-q9jg-xgcj-4ppp","CGA-qcc2-cwmv-q9gf","CGA-qh4c-4m35-5jh8","CGA-qm7f-9vv3-53ch","CGA-qqmp-6jg5-pphx","CGA-qwxp-v2w7-ggqh","CGA-r2fq-h82c-jp9p","CGA-r4xh-5ww2-2x8j","CGA-r58g-524j-c373","CGA-r624-q5hw-m6g4","CGA-r6vf-gj6g-fjv4","CGA-rp6f-7487-h42m","CGA-rwrc-hq2f-pwpr","CGA-rx2r-hwf9-7xf5","CGA-rxg6-hp7c-rwcv","CGA-vh2r-9v9h-hq9p","CGA-w7xg-f4cf-9xr8","CGA-w85v-3qj6-wvv6","CGA-w87c-vfq3-h5w6","CGA-wgrm-qwqw-6367","CGA-ww6r-f2gh-gxvj","CGA-wxq2-cq7j-345h","CGA-x5r9-cqm9-fjr8","CGA-x6mm-f22x-hqfv","CGA-x7vj-35xx-p8v8","CGA-x8mw-7c39-r264","CGA-x8pm-xjxp-f64x","CGA-xc9r-8rhx-rwfr","CGA-xrfx-gx83-2pr6"],"status":"published","duplicateOf":null,"title":null,"description":"Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, `Rack::Directory`’s path check used a string prefix match on the expanded path. A request like `/../root_example/` can escape the configured root if the target path starts with the root string, allowing directory listing outside the intended root. Versions 2.2.22, 3.1.20, and 3.2.5 fix the issue.","dates":{"published":"2026-02-18T18:45:02.095Z","modified":"2026-07-15T01:18:57.147Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Rubygems","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00763,"percentile":0.54578,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.08699999999999992,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00676},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00665,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00665,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00665,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00763,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00763,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00763,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00763,"percentile":0.54578}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00691,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00763,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00763,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00763,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00763,"percentile":0.54578}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_RACK_RACK","name":"Rack","source":"github","url":"https://github.com/rack/rack/security/advisories/GHSA-22f2-v57c-j9cx","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","description":"The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/22.html"},{"id":"CWE-548","name":"Exposure of Information Through Directory Listing","description":"The product inappropriately exposes a directory listing with an index of all the resources located inside of the directory.","type":"weakness","status":"Draft","abstraction":"Variant","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/548.html"}],"affected":[{"vendor":"chainguard","product":"gitlab-exporter-18.6","name":"gitlab-exporter-18.6","label":"gitlab-exporter-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.6","purlType":"apk","versions":[{"text":"< 18.6.6-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.6.6-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.7","name":"gitlab-exporter-18.7","label":"gitlab-exporter-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.7","purlType":"apk","versions":[{"text":"< 18.7.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.7.4-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.8","name":"gitlab-exporter-18.8","label":"gitlab-exporter-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.8","purlType":"apk","versions":[{"text":"< 18.8.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.8.4-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"< 18.1.6-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.1.6-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.2","name":"gitlab-rails-ce-18.2","label":"gitlab-rails-ce-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.3","name":"gitlab-rails-ce-18.3","label":"gitlab-rails-ce-18.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.4","name":"gitlab-rails-ce-18.4","label":"gitlab-rails-ce-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.5","name":"gitlab-rails-ce-18.5","label":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"< 18.8.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.8.7-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"< 18.9.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.3-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.2","name":"gitlab-rails-ce-fips-18.2","label":"gitlab-rails-ce-fips-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.3","name":"gitlab-rails-ce-fips-18.3","label":"gitlab-rails-ce-fips-18.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.4","name":"gitlab-rails-ce-fips-18.4","label":"gitlab-rails-ce-fips-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.5","name":"gitlab-rails-ce-fips-18.5","label":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"< 18.8.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.8.7-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.9","name":"gitlab-rails-ce-fips-18.9","label":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9","purlType":"apk","versions":[{"text":"< 18.9.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.3-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kube-fluentd-operator","name":"kube-fluentd-operator","label":"kube-fluentd-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kube-fluentd-operator","purlType":"apk","versions":[{"text":"< 1.18.2-r60","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r60","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17","name":"logstash-8.17","label":"logstash-8.17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17","purlType":"apk","versions":[{"text":"< 8.17.10-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17-iamguarded-compat","name":"logstash-8.17-iamguarded-compat","label":"logstash-8.17-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.17.10-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17-with-output-opensearch","name":"logstash-8.17-with-output-opensearch","label":"logstash-8.17-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.17.10-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18","name":"logstash-8.18","label":"logstash-8.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18-iamguarded-compat","name":"logstash-8.18-iamguarded-compat","label":"logstash-8.18-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18-with-output-opensearch","name":"logstash-8.18-with-output-opensearch","label":"logstash-8.18-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18-with-output-opensearch","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19","name":"logstash-8.19","label":"logstash-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19","purlType":"apk","versions":[{"text":"< 8.19.11-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.11-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-iamguarded-compat","name":"logstash-8.19-iamguarded-compat","label":"logstash-8.19-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.19.11-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.11-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-with-output-opensearch","name":"logstash-8.19-with-output-opensearch","label":"logstash-8.19-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.19.11-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.11-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0","name":"logstash-9.0","label":"logstash-9.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0","purlType":"apk","versions":[{"text":"< 9.0.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0-iamguarded-compat","name":"logstash-9.0-iamguarded-compat","label":"logstash-9.0-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.0.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0-with-output-opensearch","name":"logstash-9.0-with-output-opensearch","label":"logstash-9.0-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.0.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1","name":"logstash-9.1","label":"logstash-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1","purlType":"apk","versions":[{"text":"< 9.1.10-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-bitnami-compat","name":"logstash-9.1-bitnami-compat","label":"logstash-9.1-bitnami-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-bitnami-compat","purlType":"apk","versions":[{"text":"< 9.1.10-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-iamguarded-compat","name":"logstash-9.1-iamguarded-compat","label":"logstash-9.1-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.1.10-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-with-output-opensearch","name":"logstash-9.1-with-output-opensearch","label":"logstash-9.1-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.1.10-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2","name":"logstash-9.2","label":"logstash-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2","purlType":"apk","versions":[{"text":"< 9.2.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-iamguarded-compat","name":"logstash-9.2-iamguarded-compat","label":"logstash-9.2-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.2.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-with-output-opensearch","name":"logstash-9.2-with-output-opensearch","label":"logstash-9.2-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.2.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3","purlType":"apk","versions":[{"text":"< 9.3.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.3.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3-with-output-opensearch","name":"logstash-9.3-with-output-opensearch","label":"logstash-9.3-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.3.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-rack-2.2","name":"ruby3.2-rack-2.2","label":"ruby3.2-rack-2.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-rack-2.2","purlType":"apk","versions":[{"text":"< 2.2.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-rails-7.1","name":"ruby3.2-rails-7.1","label":"ruby3.2-rails-7.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-rails-7.1","purlType":"apk","versions":[{"text":"< 7.1.6-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.6-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-rails-7.2","name":"ruby3.2-rails-7.2","label":"ruby3.2-rails-7.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-rails-7.2","purlType":"apk","versions":[{"text":"< 7.2.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.2.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-rails-8.0","name":"ruby3.2-rails-8.0","label":"ruby3.2-rails-8.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-rails-8.0","purlType":"apk","versions":[{"text":"< 8.0.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-rails-8.1","name":"ruby3.2-rails-8.1","label":"ruby3.2-rails-8.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-rails-8.1","purlType":"apk","versions":[{"text":"< 8.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.3-rack-2.2","name":"ruby3.3-rack-2.2","label":"ruby3.3-rack-2.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.3-rack-2.2","purlType":"apk","versions":[{"text":"< 2.2.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.3-rails-7.1","name":"ruby3.3-rails-7.1","label":"ruby3.3-rails-7.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.3-rails-7.1","purlType":"apk","versions":[{"text":"< 7.1.6-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.6-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.3-rails-7.2","name":"ruby3.3-rails-7.2","label":"ruby3.3-rails-7.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.3-rails-7.2","purlType":"apk","versions":[{"text":"< 7.2.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.2.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.3-rails-8.0","name":"ruby3.3-rails-8.0","label":"ruby3.3-rails-8.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.3-rails-8.0","purlType":"apk","versions":[{"text":"< 8.0.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.3-rails-8.1","name":"ruby3.3-rails-8.1","label":"ruby3.3-rails-8.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.3-rails-8.1","purlType":"apk","versions":[{"text":"< 8.1.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.4-rack-2.2","name":"ruby3.4-rack-2.2","label":"ruby3.4-rack-2.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.4-rack-2.2","purlType":"apk","versions":[{"text":"< 2.2.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.4-rails-7.1","name":"ruby3.4-rails-7.1","label":"ruby3.4-rails-7.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.4-rails-7.1","purlType":"apk","versions":[{"text":"< 7.1.6-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.6-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.4-rails-7.2","name":"ruby3.4-rails-7.2","label":"ruby3.4-rails-7.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.4-rails-7.2","purlType":"apk","versions":[{"text":"< 7.2.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.2.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.4-rails-8.0","name":"ruby3.4-rails-8.0","label":"ruby3.4-rails-8.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.4-rails-8.0","purlType":"apk","versions":[{"text":"< 8.0.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.4-rails-8.1","name":"ruby3.4-rails-8.1","label":"ruby3.4-rails-8.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.4-rails-8.1","purlType":"apk","versions":[{"text":"< 8.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby4.0-rack-2.2","name":"ruby4.0-rack-2.2","label":"ruby4.0-rack-2.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby4.0-rack-2.2","purlType":"apk","versions":[{"text":"< 2.2.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby4.0-rails-7.1","name":"ruby4.0-rails-7.1","label":"ruby4.0-rails-7.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby4.0-rails-7.1","purlType":"apk","versions":[{"text":"< 7.1.6-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.6-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby4.0-rails-7.2","name":"ruby4.0-rails-7.2","label":"ruby4.0-rails-7.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby4.0-rails-7.2","purlType":"apk","versions":[{"text":"< 7.2.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.2.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby4.0-rails-8.0","name":"ruby4.0-rails-8.0","label":"ruby4.0-rails-8.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby4.0-rails-8.0","purlType":"apk","versions":[{"text":"< 8.0.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.4-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby4.0-rails-8.1","name":"ruby4.0-rails-8.1","label":"ruby4.0-rails-8.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby4.0-rails-8.1","purlType":"apk","versions":[{"text":"< 8.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kube-fluentd-operator","name":"kube-fluentd-operator","label":"kube-fluentd-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kube-fluentd-operator","purlType":"apk","versions":[{"text":"< 1.18.2-r60","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r60","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3","purlType":"apk","versions":[{"text":"< 9.3.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.3.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3-with-output-opensearch","name":"logstash-9.3-with-output-opensearch","label":"logstash-9.3-with-output-opensearch","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.3.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.2-rack-2.2","name":"ruby3.2-rack-2.2","label":"ruby3.2-rack-2.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.2-rack-2.2","purlType":"apk","versions":[{"text":"< 2.2.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.2-rails-8.1","name":"ruby3.2-rails-8.1","label":"ruby3.2-rails-8.1","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.2-rails-8.1","purlType":"apk","versions":[{"text":"< 8.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.3-rack-2.2","name":"ruby3.3-rack-2.2","label":"ruby3.3-rack-2.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.3-rack-2.2","purlType":"apk","versions":[{"text":"< 2.2.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.3-rails-8.1","name":"ruby3.3-rails-8.1","label":"ruby3.3-rails-8.1","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.3-rails-8.1","purlType":"apk","versions":[{"text":"< 8.1.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.4-rack-2.2","name":"ruby3.4-rack-2.2","label":"ruby3.4-rack-2.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.4-rack-2.2","purlType":"apk","versions":[{"text":"< 2.2.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.4-rails-8.1","name":"ruby3.4-rails-8.1","label":"ruby3.4-rails-8.1","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.4-rails-8.1","purlType":"apk","versions":[{"text":"< 8.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby4.0-rack-2.2","name":"ruby4.0-rack-2.2","label":"ruby4.0-rack-2.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby4.0-rack-2.2","purlType":"apk","versions":[{"text":"< 2.2.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby4.0-rails-8.1","name":"ruby4.0-rails-8.1","label":"ruby4.0-rails-8.1","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby4.0-rails-8.1","purlType":"apk","versions":[{"text":"< 8.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r1","eol":null,"hubHref":null},{"vendor":"debian","product":"ruby-rack","name":"ruby-rack","label":"ruby-rack","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/ruby-rack","purlType":"deb","versions":[{"text":"< 2.2.22-0+deb12u1","noFixRecorded":false,"fixedIn":null},{"text":"< 3.1.20-0+deb13u1","noFixRecorded":false,"fixedIn":null},{"text":"< 3.2.5-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-0+deb12u1 | < 3.1.20-0+deb13u1 | < 3.2.5-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"ruby-rack","name":"ruby-rack","label":"ruby-rack","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/ruby-rack","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.0.7-2ubuntu0.1+esm9","noFixRecorded":false,"fixedIn":null},{"text":"< 2.1.4-5ubuntu1.2+esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 2.2.7-1ubuntu0.6","noFixRecorded":false,"fixedIn":null},{"text":"< 3.1.16-0.1ubuntu0.2","noFixRecorded":false,"fixedIn":null},{"text":"< 3.2.4-1ubuntu1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.0.7-2ubuntu0.1+esm9 | < 2.1.4-5ubuntu1.2+esm2 | < 2.2.7-1ubuntu0.6 | < 3.1.16-0.1ubuntu0.2 | < 3.2.4-1ubuntu1","eol":null,"hubHref":null},{"vendor":"RubyGems","product":"rack","name":"rack","label":"rack","ecosystem":"RubyGems","cpePart":null,"purl":"pkg:gem/rack","purlType":"gem","versions":[{"text":"< 2.2.22","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.0.0.beta1, < 3.1.20","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.2.0, < 3.2.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22 | ≥ 3.0.0.beta1, < 3.1.20 | ≥ 3.2.0, < 3.2.5","eol":null,"hubHref":null},{"vendor":"rack","product":"rack","name":"rack","label":"rack","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.0.0.beta1, < 3.1.20","noFixRecorded":false,"fixedIn":null},{"text":"< 2.2.22","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.0.0, < 3.1.20","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.2.0, < 3.2.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.0.beta1, < 3.1.20 | < 2.2.22 | ≥ 3.0.0, < 3.1.20 | ≥ 3.2.0, < 3.2.5","eol":null,"hubHref":"/vendor/rack/rack"}],"affectedCount":80,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/rack/rack/security/advisories/GHSA-mxw3-3hh2-x2mh","label":"github.com/rack/rack/security/advisories/GHSA-mxw3-3hh2-x2mh","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Exploit","Mitigation","Vendor Advisory"]},{"url":"https://github.com/rack/rack/commit/75c5745c286637a8f049a33790c71237762069e7","label":"github.com/rack/rack/commit/75c5745c286637a8f049a33790c71237762069e7","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB","Patch"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-22860","label":"access.redhat.com/security/cve/CVE-2026-22860","hostname":"access.redhat.com","tags":["VDB Entry","X Refsource REDHAT","Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2440737","label":"bugzilla.redhat.com/show_bug.cgi?id=2440737","hostname":"bugzilla.redhat.com","tags":["Issue Tracking","X Refsource REDHAT","REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22860.json","label":"security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22860.json","hostname":"security.access.redhat.com","tags":["X Sadp Csaf Vex","WEB"]},{"url":"https://ubuntu.com/security/CVE-2026-22860","label":"ubuntu.com/security/CVE-2026-22860","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-22860","label":"www.cve.org/CVERecord?id=CVE-2026-22860","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-8066-1","label":"ubuntu.com/security/notices/USN-8066-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-22860","label":"security-tracker.debian.org/tracker/CVE-2026-22860","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22860.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22860.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22860","label":"nvd.nist.gov/vuln/detail/CVE-2026-22860","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/rack/rack","label":"github.com/rack/rack","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-22860.yml","label":"github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-22860.yml","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["DLA-4505-1","DSA-6180-1","MGASA-2026-0075","OPENSUSE-SU-2026:10286-1"],"duplicates":[],"related":["CGA-66Q9-CJF2-4G77","OPENSUSE-SU-2026:10286-1","USN-8066-1"]},"timeline":[{"kind":"published","date":"2026-02-18T18:45:02.095Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-15T01:18:57.147Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":40,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T08:16:24.666Z","stale":false,"partial":false}}