{"schemaVersion":3,"id":"CVE-2026-25500","aliases":["UBUNTU-CVE-2026-25500","DEBIAN-CVE-2026-25500","CGA-35jr-xcrg-pwp8","CGA-3fxf-6343-vf4h","CGA-3xxq-665f-mwcp","CGA-4m87-j6xh-9wwr","CGA-5793-8p83-pprx","CGA-6vjh-2qf3-x6hj","CGA-7wj3-r7c6-fgqw","CGA-8h5v-hgcg-49xg","CGA-9vpg-67gv-f468","CGA-9vqr-35hx-mrjr","CGA-c6vg-h75p-85r8","CGA-f8rp-j356-gpv7","CGA-fm36-c673-3q8w","CGA-fr34-j2q4-5r2r","CGA-gxj2-gvw8-w8cj","CGA-hm8v-x2cj-4mp9","CGA-j2rv-45m6-4h6f","CGA-pxq4-c58w-6972","CGA-r2p7-qqf5-5fh2","CGA-rj8x-wp67-gpj3","CGA-rrwg-jj22-h5v5","CGA-v69h-52c5-vh7m","CGA-w4g5-x6r3-v7f9","CGA-w7j2-wqff-9945","CGA-22pr-42q4-9ffc","CGA-2642-748q-7wv7","CGA-267w-5cxp-gv3c","CGA-2722-6fw4-xj42","CGA-2978-c82p-qwcf","CGA-2cm3-vqvq-wmrg","CGA-2f74-5mm7-pr7g","CGA-2m95-4xw2-qqfv","CGA-2qfp-q89r-xmhm","CGA-2rmg-59c2-9mp5","CGA-2v27-v64c-5xxw","CGA-32cc-h2r6-qhgw","CGA-32gh-j9j8-v97g","CGA-388p-cccp-v9px","CGA-39pr-j8g3-52mm","CGA-3jw5-9326-j8v4","CGA-3mh6-p84h-p8cp","CGA-3pj8-2hpj-cr45","CGA-3vxw-92j3-q3f4","CGA-3whg-prjg-mj85","CGA-4p5h-j66g-7393","CGA-548x-gr24-8945","CGA-565h-586g-27hx","CGA-59qh-hcq6-j9p7","CGA-5gw7-6mch-w8r9","CGA-5gx9-c4jf-85cr","CGA-5rp3-6h3r-6xjq","CGA-6p5v-5rfm-p8mf","CGA-6ppr-wpw6-jx36","CGA-6wwq-3m88-3qr8","CGA-752c-r39j-c468","CGA-798v-mw3r-9rrj","CGA-7hj5-64jx-5268","CGA-7r85-wgp3-mp6f","CGA-7r95-x2h5-qwg4","CGA-7rw5-p7cj-h576","CGA-849j-2rwq-2q92","CGA-868v-jj3g-xfhh","CGA-87jf-8gc8-4pmm","CGA-87w3-xm88-f6fg","CGA-8c3v-mw4r-935p","CGA-8wv6-57mp-5844","CGA-8xc9-rj29-hr8v","CGA-9859-487w-j97m","CGA-9fc6-9p79-vjx9","CGA-9m8w-x9jp-g8qc","CGA-9mrp-3367-prwf","CGA-9q5r-vg75-phxq","CGA-c6rq-g52c-ff2j","CGA-cg4h-h29v-h6fm","CGA-cvj4-6hm3-84v4","CGA-f226-c3m9-24g6","CGA-f3cq-jfjw-4v7w","CGA-f582-9rjj-rh5w","CGA-f985-mcq6-v9f2","CGA-fj4w-gw6j-hgxh","CGA-g7q4-p6fj-3wv6","CGA-g9x4-2wmp-wpcx","CGA-gcvf-3rrc-5jqq","CGA-gh87-3q86-8784","CGA-grr6-mff9-37jp","CGA-gxq3-24x8-2985","CGA-gxw6-whx5-grg6","CGA-h3rq-3672-hwvf","CGA-h5cw-9h4r-pc84","CGA-h864-cjr8-mcm6","CGA-hh68-g694-mj9c","CGA-hq69-c638-jrcp","CGA-hv66-23qr-c9g7","CGA-hvr6-vx5m-h44p","CGA-j7fc-4cpf-hv92","CGA-j8jq-9637-5595","CGA-j8xr-39jc-4g63","CGA-jh7x-qhc9-wpcc","CGA-jjw4-hwcv-892g","CGA-jv7h-c9x2-p8x4","CGA-jxr2-c645-rj3h","CGA-mj3x-x8vc-m929","CGA-mj85-h55w-46hq","CGA-mq9x-x2cr-q8g8","CGA-mqjf-w8mr-ph6c","CGA-mr42-8px4-c82g","CGA-p34v-gw9j-ccpc","CGA-p8rj-qh5g-g6qc","CGA-pw4p-pfgg-53q9","GHSA-whrj-4476-wvmp","CGA-q33q-9m77-2q5f","CGA-q6v4-hjpf-xh42","CGA-q84h-cr5m-gmxm","CGA-qp89-7hq3-3qw9","CGA-r2w8-6c6g-8w25","CGA-rm8g-v653-2gmh","CGA-rvgx-rgcc-wwfw","CGA-vjr4-v7mr-hcmw","CGA-w38m-36p6-qv2m","CGA-w96h-4jqw-289h","CGA-wmg5-j35g-33hv","CGA-wmgc-2pqm-5ww9","CGA-wmv9-wg63-rvm6","CGA-ww8g-c2jw-547p","CGA-wwwx-pggp-fwp2","CGA-x4w6-2mqv-j3j8","CGA-x8r4-ppr2-2p9w","CGA-xqjf-3jr4-rm32","CGA-xv2x-8w6f-3vpg"],"status":"published","duplicateOf":null,"title":null,"description":"Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, `Rack::Directory` generates an HTML directory index where each file entry is rendered as a clickable link. If a file exists on disk whose basename starts with the `javascript:` scheme (e.g. `javascript:alert(1)`), the generated index contains an anchor whose `href` is exactly `javascript:alert(1)`. Clicking the entry executes JavaScript in the browser (demonstrated with `alert(1)`). Versions 2.2.22, 3.1.20, and 3.2.5 fix the issue.","dates":{"published":"2026-02-18T18:59:31.964Z","modified":"2026-02-18T19:42:35.101Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.4,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","exploitability":5.9,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","exploitability":5.9,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","exploitability":5.9,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","exploitability":5.9,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Rubygems","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","exploitability":5.9,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00317,"percentile":0.23147,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.084,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00233},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00224,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00224,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00224,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00317,"percentile":0.23147}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00233,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00274,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00317,"percentile":0.23147}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_RACK_RACK","name":"Rack","source":"github","url":"https://github.com/rack/rack/security/advisories/GHSA-22f2-v57c-j9cx","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/79.html"}],"affected":[{"vendor":"chainguard","product":"gitlab-exporter-18.6","name":"gitlab-exporter-18.6","label":"gitlab-exporter-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.6","purlType":"apk","versions":[{"text":"< 18.6.6-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.6.6-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.7","name":"gitlab-exporter-18.7","label":"gitlab-exporter-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.7","purlType":"apk","versions":[{"text":"< 18.7.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.7.4-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.8","name":"gitlab-exporter-18.8","label":"gitlab-exporter-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.8","purlType":"apk","versions":[{"text":"< 18.8.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.8.4-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"< 18.1.6-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.1.6-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.2","name":"gitlab-rails-ce-18.2","label":"gitlab-rails-ce-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.3","name":"gitlab-rails-ce-18.3","label":"gitlab-rails-ce-18.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.4","name":"gitlab-rails-ce-18.4","label":"gitlab-rails-ce-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.5","name":"gitlab-rails-ce-18.5","label":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"< 18.8.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.8.7-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"< 18.9.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.3-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.2","name":"gitlab-rails-ce-fips-18.2","label":"gitlab-rails-ce-fips-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.3","name":"gitlab-rails-ce-fips-18.3","label":"gitlab-rails-ce-fips-18.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.4","name":"gitlab-rails-ce-fips-18.4","label":"gitlab-rails-ce-fips-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.5","name":"gitlab-rails-ce-fips-18.5","label":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"< 18.8.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.8.7-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.9","name":"gitlab-rails-ce-fips-18.9","label":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9","purlType":"apk","versions":[{"text":"< 18.9.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.3-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kube-fluentd-operator","name":"kube-fluentd-operator","label":"kube-fluentd-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kube-fluentd-operator","purlType":"apk","versions":[{"text":"< 1.18.2-r60","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r60","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17","name":"logstash-8.17","label":"logstash-8.17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17","purlType":"apk","versions":[{"text":"< 8.17.10-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17-iamguarded-compat","name":"logstash-8.17-iamguarded-compat","label":"logstash-8.17-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.17.10-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17-with-output-opensearch","name":"logstash-8.17-with-output-opensearch","label":"logstash-8.17-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.17.10-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18","name":"logstash-8.18","label":"logstash-8.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18-iamguarded-compat","name":"logstash-8.18-iamguarded-compat","label":"logstash-8.18-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18-with-output-opensearch","name":"logstash-8.18-with-output-opensearch","label":"logstash-8.18-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18-with-output-opensearch","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19","name":"logstash-8.19","label":"logstash-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19","purlType":"apk","versions":[{"text":"< 8.19.11-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.11-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-iamguarded-compat","name":"logstash-8.19-iamguarded-compat","label":"logstash-8.19-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.19.11-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.11-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-with-output-opensearch","name":"logstash-8.19-with-output-opensearch","label":"logstash-8.19-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.19.11-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.11-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0","name":"logstash-9.0","label":"logstash-9.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0","purlType":"apk","versions":[{"text":"< 9.0.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0-iamguarded-compat","name":"logstash-9.0-iamguarded-compat","label":"logstash-9.0-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.0.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0-with-output-opensearch","name":"logstash-9.0-with-output-opensearch","label":"logstash-9.0-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.0.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1","name":"logstash-9.1","label":"logstash-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1","purlType":"apk","versions":[{"text":"< 9.1.10-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-bitnami-compat","name":"logstash-9.1-bitnami-compat","label":"logstash-9.1-bitnami-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-bitnami-compat","purlType":"apk","versions":[{"text":"< 9.1.10-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-iamguarded-compat","name":"logstash-9.1-iamguarded-compat","label":"logstash-9.1-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.1.10-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-with-output-opensearch","name":"logstash-9.1-with-output-opensearch","label":"logstash-9.1-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.1.10-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2","name":"logstash-9.2","label":"logstash-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2","purlType":"apk","versions":[{"text":"< 9.2.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-iamguarded-compat","name":"logstash-9.2-iamguarded-compat","label":"logstash-9.2-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.2.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-with-output-opensearch","name":"logstash-9.2-with-output-opensearch","label":"logstash-9.2-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.2.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3","purlType":"apk","versions":[{"text":"< 9.3.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.3.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3-with-output-opensearch","name":"logstash-9.3-with-output-opensearch","label":"logstash-9.3-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.3.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-rack-2.2","name":"ruby3.2-rack-2.2","label":"ruby3.2-rack-2.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-rack-2.2","purlType":"apk","versions":[{"text":"< 2.2.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-rails-7.1","name":"ruby3.2-rails-7.1","label":"ruby3.2-rails-7.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-rails-7.1","purlType":"apk","versions":[{"text":"< 7.1.6-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.6-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-rails-7.2","name":"ruby3.2-rails-7.2","label":"ruby3.2-rails-7.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-rails-7.2","purlType":"apk","versions":[{"text":"< 7.2.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.2.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-rails-8.0","name":"ruby3.2-rails-8.0","label":"ruby3.2-rails-8.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-rails-8.0","purlType":"apk","versions":[{"text":"< 8.0.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-rails-8.1","name":"ruby3.2-rails-8.1","label":"ruby3.2-rails-8.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-rails-8.1","purlType":"apk","versions":[{"text":"< 8.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.3-rack-2.2","name":"ruby3.3-rack-2.2","label":"ruby3.3-rack-2.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.3-rack-2.2","purlType":"apk","versions":[{"text":"< 2.2.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.3-rails-7.1","name":"ruby3.3-rails-7.1","label":"ruby3.3-rails-7.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.3-rails-7.1","purlType":"apk","versions":[{"text":"< 7.1.6-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.6-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.3-rails-7.2","name":"ruby3.3-rails-7.2","label":"ruby3.3-rails-7.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.3-rails-7.2","purlType":"apk","versions":[{"text":"< 7.2.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.2.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.3-rails-8.0","name":"ruby3.3-rails-8.0","label":"ruby3.3-rails-8.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.3-rails-8.0","purlType":"apk","versions":[{"text":"< 8.0.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.3-rails-8.1","name":"ruby3.3-rails-8.1","label":"ruby3.3-rails-8.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.3-rails-8.1","purlType":"apk","versions":[{"text":"< 8.1.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.4-rack-2.2","name":"ruby3.4-rack-2.2","label":"ruby3.4-rack-2.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.4-rack-2.2","purlType":"apk","versions":[{"text":"< 2.2.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.4-rails-7.1","name":"ruby3.4-rails-7.1","label":"ruby3.4-rails-7.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.4-rails-7.1","purlType":"apk","versions":[{"text":"< 7.1.6-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.6-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.4-rails-7.2","name":"ruby3.4-rails-7.2","label":"ruby3.4-rails-7.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.4-rails-7.2","purlType":"apk","versions":[{"text":"< 7.2.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.2.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.4-rails-8.0","name":"ruby3.4-rails-8.0","label":"ruby3.4-rails-8.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.4-rails-8.0","purlType":"apk","versions":[{"text":"< 8.0.4-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.4-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.4-rails-8.1","name":"ruby3.4-rails-8.1","label":"ruby3.4-rails-8.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.4-rails-8.1","purlType":"apk","versions":[{"text":"< 8.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby4.0-rack-2.2","name":"ruby4.0-rack-2.2","label":"ruby4.0-rack-2.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby4.0-rack-2.2","purlType":"apk","versions":[{"text":"< 2.2.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby4.0-rails-7.1","name":"ruby4.0-rails-7.1","label":"ruby4.0-rails-7.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby4.0-rails-7.1","purlType":"apk","versions":[{"text":"< 7.1.6-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.6-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby4.0-rails-7.2","name":"ruby4.0-rails-7.2","label":"ruby4.0-rails-7.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby4.0-rails-7.2","purlType":"apk","versions":[{"text":"< 7.2.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.2.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby4.0-rails-8.0","name":"ruby4.0-rails-8.0","label":"ruby4.0-rails-8.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby4.0-rails-8.0","purlType":"apk","versions":[{"text":"< 8.0.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.4-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby4.0-rails-8.1","name":"ruby4.0-rails-8.1","label":"ruby4.0-rails-8.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby4.0-rails-8.1","purlType":"apk","versions":[{"text":"< 8.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kube-fluentd-operator","name":"kube-fluentd-operator","label":"kube-fluentd-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kube-fluentd-operator","purlType":"apk","versions":[{"text":"< 1.18.2-r60","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r60","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3","purlType":"apk","versions":[{"text":"< 9.3.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.3.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3-with-output-opensearch","name":"logstash-9.3-with-output-opensearch","label":"logstash-9.3-with-output-opensearch","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.3.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.2-rack-2.2","name":"ruby3.2-rack-2.2","label":"ruby3.2-rack-2.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.2-rack-2.2","purlType":"apk","versions":[{"text":"< 2.2.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.2-rails-8.1","name":"ruby3.2-rails-8.1","label":"ruby3.2-rails-8.1","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.2-rails-8.1","purlType":"apk","versions":[{"text":"< 8.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.3-rack-2.2","name":"ruby3.3-rack-2.2","label":"ruby3.3-rack-2.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.3-rack-2.2","purlType":"apk","versions":[{"text":"< 2.2.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.3-rails-8.1","name":"ruby3.3-rails-8.1","label":"ruby3.3-rails-8.1","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.3-rails-8.1","purlType":"apk","versions":[{"text":"< 8.1.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.4-rack-2.2","name":"ruby3.4-rack-2.2","label":"ruby3.4-rack-2.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.4-rack-2.2","purlType":"apk","versions":[{"text":"< 2.2.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.4-rails-8.1","name":"ruby3.4-rails-8.1","label":"ruby3.4-rails-8.1","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.4-rails-8.1","purlType":"apk","versions":[{"text":"< 8.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby4.0-rack-2.2","name":"ruby4.0-rack-2.2","label":"ruby4.0-rack-2.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby4.0-rack-2.2","purlType":"apk","versions":[{"text":"< 2.2.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby4.0-rails-8.1","name":"ruby4.0-rails-8.1","label":"ruby4.0-rails-8.1","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby4.0-rails-8.1","purlType":"apk","versions":[{"text":"< 8.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.2-r1","eol":null,"hubHref":null},{"vendor":"debian","product":"ruby-rack","name":"ruby-rack","label":"ruby-rack","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/ruby-rack","purlType":"deb","versions":[{"text":"< 2.2.22-0+deb12u1","noFixRecorded":false,"fixedIn":null},{"text":"< 3.1.20-0+deb13u1","noFixRecorded":false,"fixedIn":null},{"text":"< 3.2.5-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22-0+deb12u1 | < 3.1.20-0+deb13u1 | < 3.2.5-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"ruby-rack","name":"ruby-rack","label":"ruby-rack","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/ruby-rack","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.0.7-2ubuntu0.1+esm9","noFixRecorded":false,"fixedIn":null},{"text":"< 2.1.4-5ubuntu1.2+esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 2.2.7-1ubuntu0.6","noFixRecorded":false,"fixedIn":null},{"text":"< 3.1.16-0.1ubuntu0.2","noFixRecorded":false,"fixedIn":null},{"text":"< 3.2.4-1ubuntu1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.0.7-2ubuntu0.1+esm9 | < 2.1.4-5ubuntu1.2+esm2 | < 2.2.7-1ubuntu0.6 | < 3.1.16-0.1ubuntu0.2 | < 3.2.4-1ubuntu1","eol":null,"hubHref":null},{"vendor":"RubyGems","product":"rack","name":"rack","label":"rack","ecosystem":"RubyGems","cpePart":null,"purl":"pkg:gem/rack","purlType":"gem","versions":[{"text":"< 2.2.22","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.0.0.beta1, < 3.1.20","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.2.0, < 3.2.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.22 | ≥ 3.0.0.beta1, < 3.1.20 | ≥ 3.2.0, < 3.2.5","eol":null,"hubHref":null},{"vendor":"rack","product":"rack","name":"rack","label":"rack","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.0.0.beta1, < 3.1.20","noFixRecorded":false,"fixedIn":null},{"text":"< 2.2.22","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.0.0, < 3.1.20","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.2.0, < 3.2.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.0.beta1, < 3.1.20 | < 2.2.22 | ≥ 3.0.0, < 3.1.20 | ≥ 3.2.0, < 3.2.5","eol":null,"hubHref":"/vendor/rack/rack"}],"affectedCount":80,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/rack/rack/security/advisories/GHSA-whrj-4476-wvmp","label":"github.com/rack/rack/security/advisories/GHSA-whrj-4476-wvmp","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Exploit","Mitigation","Vendor Advisory"]},{"url":"https://github.com/rack/rack/commit/f2f225f297b99fbee3d9f51255d41f601fc40aff","label":"github.com/rack/rack/commit/f2f225f297b99fbee3d9f51255d41f601fc40aff","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB","Patch"]},{"url":"https://ubuntu.com/security/CVE-2026-25500","label":"ubuntu.com/security/CVE-2026-25500","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-25500","label":"www.cve.org/CVERecord?id=CVE-2026-25500","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-8066-1","label":"ubuntu.com/security/notices/USN-8066-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-25500","label":"security-tracker.debian.org/tracker/CVE-2026-25500","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25500.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25500.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25500","label":"nvd.nist.gov/vuln/detail/CVE-2026-25500","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/rack/rack","label":"github.com/rack/rack","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-25500.yml","label":"github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-25500.yml","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["DLA-4505-1","DSA-6180-1","MGASA-2026-0075","OPENSUSE-SU-2026:10286-1"],"duplicates":[],"related":["CGA-C5JR-5288-FHR3","OPENSUSE-SU-2026:10286-1","USN-8066-1"]},"timeline":[{"kind":"published","date":"2026-02-18T18:59:31.964Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-18T19:42:35.101Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":32,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T13:40:17.790Z","stale":false,"partial":false}}