{"schemaVersion":3,"id":"CVE-2026-25765","aliases":["UBUNTU-CVE-2026-25765","DEBIAN-CVE-2026-25765","CGA-35w8-7fm2-8j29","CGA-3f5r-76jg-cv2v","CGA-3hc5-5x85-phrr","CGA-55qc-9xjp-79jh","CGA-7w22-vvrm-ghpp","CGA-8r7r-6c9q-v9jf","CGA-96fv-25c8-v4c2","CGA-97x4-qmqp-457g","CGA-99x8-mgh2-c4c4","CGA-fhfr-g656-4f4p","CGA-gfpg-m58j-w337","CGA-hqff-4hwx-wvwr","CGA-hrvw-hrhx-685g","CGA-v36x-vqqm-fg86","CGA-2rv7-jx86-8j6v","CGA-2wwh-h5xh-9jrr","CGA-33cx-r922-528m","CGA-34c7-qhmw-43qc","CGA-3hf8-6frg-39qf","CGA-3rj6-3vq5-9g47","CGA-43w4-hxf4-ch66","CGA-479j-2mx7-3599","CGA-4q3x-2457-ggm5","CGA-552m-h7cr-3w66","CGA-58gg-qjvf-33mj","CGA-5h32-q2vh-58m5","CGA-5hx4-x29p-29p2","CGA-5mmr-xmpc-rfx6","CGA-5mw9-qx39-x6mq","CGA-5p6r-3mfg-jhjj","CGA-628p-mcvw-wp3p","CGA-6425-7cw5-85cj","CGA-6c56-mmfw-cmr6","CGA-6h8v-8x8j-j94g","CGA-6hwm-5p38-6743","CGA-7wcm-8f6x-vfvf","CGA-7xxf-rhfq-pcxp","CGA-836c-2v69-5j4p","CGA-849q-xcqx-64v3","CGA-8876-pwr4-r3pv","CGA-8mfq-4x55-7w6m","CGA-949p-vmvg-m4vj","CGA-9m32-g8hc-9w7f","CGA-9q3p-pmx8-8mjp","CGA-9v66-v58c-5c4v","CGA-9xx2-chc9-jg22","CGA-c5w4-6752-vxj8","CGA-c68c-5554-mj29","CGA-c6qr-4xrf-xpf4","CGA-c8wv-5g4v-6jvv","CGA-c93h-jw2j-59fc","CGA-cj9m-x625-gvf3","CGA-f9vr-q65p-35wf","CGA-ffr6-7g8f-73fj","CGA-fpqg-qqqq-fr4w","CGA-fw74-q3v3-688w","CGA-g529-5vr5-g3qf","CGA-g7ff-gg5m-gg7p","CGA-gm47-hm5f-vrfq","CGA-gx89-5p95-77gh","CGA-h87g-vhc5-72q5","CGA-hfq2-ff42-p5v5","CGA-hg8j-6h4v-q4v6","CGA-hwp4-v9qx-9jgv","CGA-j43f-wxf7-c2x2","CGA-j7c6-q627-6h92","CGA-j7r5-7vww-5fpc","CGA-jm6p-c25m-9mhr","CGA-jp82-p4m4-cgcq","CGA-jq7r-2mr7-pjpw","CGA-jvvc-c96h-5hvm","CGA-m733-jwv6-vg83","CGA-m955-4hmr-x7vg","CGA-m9fx-c3gp-v979","CGA-mc9p-j586-g5f2","CGA-mqq6-fmfv-h59h","CGA-mqrg-5m8f-mcjq","CGA-p5f5-78rx-8495","CGA-pc87-c97w-fjxm","CGA-pf93-phrx-v745","CGA-pgvq-f9vx-rm55","CGA-pj4g-mpcj-rhr3","CGA-pj5j-5383-cgxr","CGA-ppjp-r3gr-5rp4","GHSA-33mh-2634-fwr2","CGA-pwpx-3jx3-5m99","CGA-q2fr-4qwc-7vff","CGA-q548-ppmv-wmfq","CGA-q5gr-v6xm-rr6p","CGA-q83h-pg3x-9fhv","CGA-qf6x-xpg5-r2v5","CGA-qm6r-gp4p-9vr6","CGA-r2qf-77fp-9hr8","CGA-r3gh-hvrg-32w7","CGA-r8r3-hrwr-5wwf","CGA-rcx7-7hj5-9pmq","CGA-rfx3-rvxw-pxg5","CGA-rgv2-fwgw-6rw4","CGA-rvm6-78fg-x758","CGA-v3jp-p76q-xjf7","CGA-v7g3-mv2x-6r4x","CGA-v7wq-x7pq-8pww","CGA-vqhm-fqmg-2xrj","CGA-vv46-6wgc-qcww","CGA-w669-6356-4529","CGA-w7gp-rrq5-fj2j","CGA-wm3f-m248-27pg","CGA-wr9q-28g8-2vcj","CGA-x6j9-3v4p-4x45","CGA-x837-r848-rq8w","CGA-xqxq-fqhp-fjrx"],"status":"published","duplicateOf":null,"title":null,"description":"Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. Prior to 2.14.1, Faraday's build_exclusive_url method (in lib/faraday/connection.rb) uses Ruby's URI#merge to combine the connection's base URL with a user-supplied path. Per RFC 3986, protocol-relative URLs (e.g. //evil.com/path) are treated as network-path references that override the base URL's host/authority component. This means that if any application passes user-controlled input to Faraday's get(), post(), build_url(), or other request methods, an attacker can supply a protocol-relative URL like //attacker.com/endpoint to redirect the request to an arbitrary host, enabling Server-Side Request Forgery (SSRF). This vulnerability is fixed in 2.14.1.","dates":{"published":"2026-02-09T20:30:58.774Z","modified":"2026-02-10T15:59:26.645Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.8,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Rubygems","score":5.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00446,"percentile":0.37442,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.08100000000000004,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00365},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00446,"percentile":0.37442}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00446,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00446,"percentile":0.37442}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-918","name":"Server-Side Request Forgery (SSRF)","description":"The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/918.html"}],"affected":[{"vendor":"chainguard","product":"cinc-auditor","name":"cinc-auditor","label":"cinc-auditor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cinc-auditor","purlType":"apk","versions":[{"text":"< 7.0.95-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0.95-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-cng-18.9","name":"gitlab-cng-18.9","label":"gitlab-cng-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-cng-18.9","purlType":"apk","versions":[{"text":"< 18.9.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.10","name":"gitlab-exporter-18.10","label":"gitlab-exporter-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.6","name":"gitlab-exporter-18.6","label":"gitlab-exporter-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.7","name":"gitlab-exporter-18.7","label":"gitlab-exporter-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.8","name":"gitlab-exporter-18.8","label":"gitlab-exporter-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.9","name":"gitlab-exporter-18.9","label":"gitlab-exporter-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.9","purlType":"apk","versions":[{"text":"< 18.9.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.10","name":"gitlab-rails-ce-18.10","label":"gitlab-rails-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.11","name":"gitlab-rails-ce-18.11","label":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11","purlType":"apk","versions":[{"text":"< 18.11.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.2","name":"gitlab-rails-ce-18.2","label":"gitlab-rails-ce-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.3","name":"gitlab-rails-ce-18.3","label":"gitlab-rails-ce-18.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.4","name":"gitlab-rails-ce-18.4","label":"gitlab-rails-ce-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.5","name":"gitlab-rails-ce-18.5","label":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.10","name":"gitlab-rails-ce-fips-18.10","label":"gitlab-rails-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.11","name":"gitlab-rails-ce-fips-18.11","label":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11","purlType":"apk","versions":[{"text":"< 18.11.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.2","name":"gitlab-rails-ce-fips-18.2","label":"gitlab-rails-ce-fips-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.3","name":"gitlab-rails-ce-fips-18.3","label":"gitlab-rails-ce-fips-18.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.4","name":"gitlab-rails-ce-fips-18.4","label":"gitlab-rails-ce-fips-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.5","name":"gitlab-rails-ce-fips-18.5","label":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.9","name":"gitlab-rails-ce-fips-18.9","label":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kube-fluentd-operator","name":"kube-fluentd-operator","label":"kube-fluentd-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kube-fluentd-operator","purlType":"apk","versions":[{"text":"< 1.18.2-r56","noFixRecorded":false,"fixedIn":null},{"text":"< 1.18.2-r60","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r56 | < 1.18.2-r60","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kube-logging-operator-fluentd-outputs","name":"kube-logging-operator-fluentd-outputs","label":"kube-logging-operator-fluentd-outputs","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kube-logging-operator-fluentd-outputs","purlType":"apk","versions":[{"text":"< 6.3.2-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.3.2-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17","name":"logstash-8.17","label":"logstash-8.17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17","purlType":"apk","versions":[{"text":"< 8.17.10-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17-iamguarded-compat","name":"logstash-8.17-iamguarded-compat","label":"logstash-8.17-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.17.10-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17-with-output-opensearch","name":"logstash-8.17-with-output-opensearch","label":"logstash-8.17-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.17.10-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18","name":"logstash-8.18","label":"logstash-8.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18-iamguarded-compat","name":"logstash-8.18-iamguarded-compat","label":"logstash-8.18-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18-with-output-opensearch","name":"logstash-8.18-with-output-opensearch","label":"logstash-8.18-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18-with-output-opensearch","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19","name":"logstash-8.19","label":"logstash-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19","purlType":"apk","versions":[{"text":"< 8.19.11-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.11-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-iamguarded-compat","name":"logstash-8.19-iamguarded-compat","label":"logstash-8.19-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.19.11-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.11-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-with-output-opensearch","name":"logstash-8.19-with-output-opensearch","label":"logstash-8.19-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.19.11-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.11-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0","name":"logstash-9.0","label":"logstash-9.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0","purlType":"apk","versions":[{"text":"< 9.0.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0-iamguarded-compat","name":"logstash-9.0-iamguarded-compat","label":"logstash-9.0-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.0.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0-with-output-opensearch","name":"logstash-9.0-with-output-opensearch","label":"logstash-9.0-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.0.8-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1","name":"logstash-9.1","label":"logstash-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1","purlType":"apk","versions":[{"text":"< 9.1.10-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-bitnami-compat","name":"logstash-9.1-bitnami-compat","label":"logstash-9.1-bitnami-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-bitnami-compat","purlType":"apk","versions":[{"text":"< 9.1.10-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-iamguarded-compat","name":"logstash-9.1-iamguarded-compat","label":"logstash-9.1-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.1.10-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-with-output-opensearch","name":"logstash-9.1-with-output-opensearch","label":"logstash-9.1-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.1.10-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2","name":"logstash-9.2","label":"logstash-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2","purlType":"apk","versions":[{"text":"< 9.2.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-iamguarded-compat","name":"logstash-9.2-iamguarded-compat","label":"logstash-9.2-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.2.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-with-output-opensearch","name":"logstash-9.2-with-output-opensearch","label":"logstash-9.2-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.2.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3","purlType":"apk","versions":[{"text":"< 9.3.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.3.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3-with-output-opensearch","name":"logstash-9.3-with-output-opensearch","label":"logstash-9.3-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.3.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-faraday-1.10.3","name":"ruby3.2-faraday-1.10.3","label":"ruby3.2-faraday-1.10.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-faraday-1.10.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"cinc-auditor","name":"cinc-auditor","label":"cinc-auditor","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/cinc-auditor","purlType":"apk","versions":[{"text":"< 7.0.95-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0.95-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kube-fluentd-operator","name":"kube-fluentd-operator","label":"kube-fluentd-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kube-fluentd-operator","purlType":"apk","versions":[{"text":"< 1.18.2-r56","noFixRecorded":false,"fixedIn":null},{"text":"< 1.18.2-r60","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r56 | < 1.18.2-r60","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kube-logging-operator-fluentd-outputs","name":"kube-logging-operator-fluentd-outputs","label":"kube-logging-operator-fluentd-outputs","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kube-logging-operator-fluentd-outputs","purlType":"apk","versions":[{"text":"< 6.3.2-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.3.2-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3","purlType":"apk","versions":[{"text":"< 9.3.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.3.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3-with-output-opensearch","name":"logstash-9.3-with-output-opensearch","label":"logstash-9.3-with-output-opensearch","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.3.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.1-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"ruby-faraday","name":"ruby-faraday","label":"ruby-faraday","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/ruby-faraday","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.14.1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.14.1-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"ruby-faraday","name":"ruby-faraday","label":"ruby-faraday","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/ruby-faraday","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"faraday_project","product":"faraday","name":"faraday","label":"faraday","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.0.0, < 1.10.5","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.0.0, < 2.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.0.0, < 1.10.5 | ≥ 2.0.0, < 2.14.1","eol":null,"hubHref":"/vendor/faraday_project/faraday"},{"vendor":"RubyGems","product":"faraday","name":"faraday","label":"faraday","ecosystem":"RubyGems","cpePart":null,"purl":"pkg:gem/faraday","purlType":"gem","versions":[{"text":"≥ 2.0.0, < 2.14.1","noFixRecorded":false,"fixedIn":null},{"text":"≥ 1.0.0, < 1.10.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.0.0, < 2.14.1 | ≥ 1.0.0, < 1.10.5","eol":null,"hubHref":null},{"vendor":"lostisland","product":"faraday","name":"faraday","label":"faraday","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.14.1","eol":null,"hubHref":"/vendor/lostisland/faraday"}],"affectedCount":65,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/lostisland/faraday/security/advisories/GHSA-33mh-2634-fwr2","label":"github.com/lostisland/faraday/security/advisories/GHSA-33mh-2634-fwr2","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Mitigation","Vendor Advisory"]},{"url":"https://github.com/lostisland/faraday/commit/a6d3a3a0bf59c2ab307d0abd91bc126aef5561bc","label":"github.com/lostisland/faraday/commit/a6d3a3a0bf59c2ab307d0abd91bc126aef5561bc","hostname":"github.com","tags":["X Refsource MISC","REPORT","FIX","WEB","Patch"]},{"url":"https://github.com/lostisland/faraday/releases/tag/v2.14.1","label":"github.com/lostisland/faraday/releases/tag/v2.14.1","hostname":"github.com","tags":["X Refsource MISC","REPORT","WEB","Product","Release Notes"]},{"url":"https://ubuntu.com/security/CVE-2026-25765","label":"ubuntu.com/security/CVE-2026-25765","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-25765","label":"www.cve.org/CVERecord?id=CVE-2026-25765","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-25765","label":"security-tracker.debian.org/tracker/CVE-2026-25765","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25765.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25765.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25765","label":"nvd.nist.gov/vuln/detail/CVE-2026-25765","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://github.com/lostisland/faraday/pull/1569","label":"github.com/lostisland/faraday/pull/1569","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/lostisland/faraday","label":"github.com/lostisland/faraday","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/lostisland/faraday/releases/tag/v1.10.5","label":"github.com/lostisland/faraday/releases/tag/v1.10.5","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/faraday/CVE-2026-25765.yml","label":"github.com/rubysec/ruby-advisory-db/blob/master/gems/faraday/CVE-2026-25765.yml","hostname":"github.com","tags":["WEB"]},{"url":"https://www.rfc-editor.org/rfc/rfc3986#section-5.2.2","label":"www.rfc-editor.org/rfc/rfc3986","hostname":"www.rfc-editor.org","tags":["WEB"]},{"url":"https://www.rfc-editor.org/rfc/rfc3986#section-5.4","label":"www.rfc-editor.org/rfc/rfc3986","hostname":"www.rfc-editor.org","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-V2W2-V3XJ-V37M","CVE-2026-33637"]},"timeline":[{"kind":"published","date":"2026-02-09T20:30:58.774Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-10T15:59:26.645Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":23,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T21:31:22.288Z","stale":false,"partial":false}}