{"schemaVersion":3,"id":"CVE-2026-32700","aliases":["UBUNTU-CVE-2026-32700","DEBIAN-CVE-2026-32700","CGA-2fvm-frq6-5h76","CGA-2g6r-m8wr-68rp","CGA-2mpv-8732-825x","CGA-2q47-j2h3-3fq6","CGA-2rv8-cx5p-j295","CGA-2x5h-cgpm-4p4w","CGA-38qw-gc86-mxg2","CGA-3cr6-cv6g-h37p","CGA-3fjp-388h-q5p3","CGA-3hxv-23qj-859j","CGA-462q-4j4p-3pw7","CGA-4jch-cqmx-73qx","CGA-4r4x-3wpg-3j32","CGA-4whc-fhjp-gp88","CGA-4xh7-pf9c-wv3m","CGA-5549-w5h4-4c93","CGA-578c-42fr-vv28","CGA-5p9h-mq3v-4fjv","CGA-5rh6-4m94-3c9q","CGA-5vw5-76w3-cjr6","CGA-5x57-x5x5-x22w","CGA-6697-mg5x-6c5c","CGA-6cmx-68gv-v8wj","CGA-6q36-qrpc-rmfr","CGA-74g4-997x-q35v","CGA-76wx-g293-jg53","CGA-76xx-7mf8-mp8c","CGA-7h48-f729-4hgj","CGA-83v8-wgv7-5m9g","CGA-8m6g-rxjm-745w","CGA-8pfw-wm77-pgqj","CGA-937f-rm6m-q427","CGA-94cp-2688-2f6f","CGA-9mcx-5p7p-fj3w","CGA-9w76-qg73-9fgp","CGA-c9g7-pf92-5g32","CGA-f3xw-59mw-7x84","CGA-f95m-qfwx-r247","CGA-fpjf-g7cf-59vp","CGA-fw3r-grcr-6m8f","CGA-g3jg-x5rp-9crc","CGA-g3qg-mhxc-5ppj","CGA-gf9m-39r6-3jgj","CGA-gj9p-3fhj-8f93","CGA-gx98-9747-884r","CGA-h48x-f5p5-jpw2","CGA-h56r-62gv-fmj2","CGA-h5ww-2w35-mmq5","CGA-h72x-wwgx-m9rc","CGA-h795-6h5c-55rc","CGA-hq8g-cqqg-jj2v","CGA-hwrw-8px9-2m6c","CGA-j88c-g65x-3737","CGA-j94c-52jh-mm6j","CGA-jq6f-v6c2-c6w2","CGA-jqmf-vchf-3r3h","CGA-m9hg-gmpp-46hq","CGA-mh29-p336-x4pr","CGA-p2r2-6fhg-qwhq","CGA-p58j-2cqr-pr35","CGA-p7gf-vppp-qjqh","CGA-p8xj-v77g-9r43","GHSA-57hq-95w6-v4fc","CGA-qpqj-hmjg-53x4","CGA-qrv7-jhqg-f824","CGA-r3h5-fq7p-h29h","CGA-r658-78gr-47hq","CGA-rpcr-7jv7-fpxr","CGA-v997-h9h3-9449","CGA-vf2g-xc5q-3f5h","CGA-vgv3-53h5-jq8p","CGA-vh9w-x8gx-qwhh","CGA-vmxx-w3cv-w968","CGA-vq5v-7hjp-8842","CGA-w6j6-qq9w-4wwx","CGA-wxg2-p4ch-524v","CGA-x47v-wqph-3fc3","CGA-x49m-j8h3-26qw","CGA-x53q-qv53-m5jw","CGA-xm3p-j45p-q4vm","CGA-xx3v-v8h8-w7g6","CGA-f8rr-pr55-wq4h","CGA-hp7g-3fpx-f9cf","CGA-xmxq-c6qx-pvg9","CGA-79jw-wpq2-xhg7","CGA-3j5f-w93p-p83v","CGA-6p2g-wcp9-6qw5","CGA-9x75-f7p2-4chv","CGA-mj77-gqpv-rx4p"],"status":"published","duplicateOf":null,"title":null,"description":"Devise is an authentication solution for Rails based on Warden. Prior to version 5.0.3, a race condition in Devise's Confirmable module allows an attacker to confirm an email address they do not own. This affects any Devise application using the `reconfirmable` option (the default when using Confirmable with email changes). By sending two concurrent email change requests, an attacker can desynchronize the `confirmation_token` and `unconfirmed_email` fields. The confirmation token is sent to an email the attacker controls, but the `unconfirmed_email` in the database points to a victim's email address. When the attacker uses the token, the victim's email is confirmed on the attacker's account. This is patched in Devise v5.0.3. Users should upgrade as soon as possible. As a workaround, applications can override a specific method from Devise models to force `unconfirmed_email` to be persisted when unchanged. Note that Mongoid does not seem to respect that `will_change!` should force the attribute to be persisted, even if it did not really change, so the user might have to implement a workaround similar to Devise by setting `changed_attributes[\"unconfirmed_email\"] = nil` as well.","dates":{"published":"2026-03-18T20:55:55.034Z","modified":"2026-03-20T18:11:56.909Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6,"severity":"medium","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":6,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":6,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","exploitability":4.1,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","exploitability":4.1,"impact":6,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":6,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Rubygems","score":6,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Rubygems","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","exploitability":4.1,"impact":6,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":6,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00349,"percentile":0.27032,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.07400000000000002,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00275},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00275,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00275,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00275,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00275,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00275,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00275,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00275,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00275,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00275,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00275,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00349,"percentile":0.27032}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00275,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00275,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00275,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00275,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00336,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00349,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00349,"percentile":0.27032}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-362","name":"Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","description":"The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/362.html"}],"affected":[{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.1","name":"commercial-gitlab-rails-ee-19.1","label":"commercial-gitlab-rails-ee-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.2","name":"commercial-gitlab-rails-ee-19.2","label":"commercial-gitlab-rails-ee-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.3","name":"commercial-gitlab-rails-ee-19.3","label":"commercial-gitlab-rails-ee-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.4","name":"commercial-gitlab-rails-ee-19.4","label":"commercial-gitlab-rails-ee-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.5","name":"commercial-gitlab-rails-ee-19.5","label":"commercial-gitlab-rails-ee-19.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.1","name":"commercial-gitlab-rails-ee-fips-19.1","label":"commercial-gitlab-rails-ee-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.2","name":"commercial-gitlab-rails-ee-fips-19.2","label":"commercial-gitlab-rails-ee-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.3","name":"commercial-gitlab-rails-ee-fips-19.3","label":"commercial-gitlab-rails-ee-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.4","name":"commercial-gitlab-rails-ee-fips-19.4","label":"commercial-gitlab-rails-ee-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.5","name":"commercial-gitlab-rails-ee-fips-19.5","label":"commercial-gitlab-rails-ee-fips-19.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.10","name":"gitlab-rails-ce-18.10","label":"gitlab-rails-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.11","name":"gitlab-rails-ce-18.11","label":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.2","name":"gitlab-rails-ce-18.2","label":"gitlab-rails-ce-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.3","name":"gitlab-rails-ce-18.3","label":"gitlab-rails-ce-18.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.4","name":"gitlab-rails-ce-18.4","label":"gitlab-rails-ce-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.5","name":"gitlab-rails-ce-18.5","label":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.0","name":"gitlab-rails-ce-19.0","label":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.1","name":"gitlab-rails-ce-19.1","label":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.2","name":"gitlab-rails-ce-19.2","label":"gitlab-rails-ce-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.3","name":"gitlab-rails-ce-19.3","label":"gitlab-rails-ce-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.4","name":"gitlab-rails-ce-19.4","label":"gitlab-rails-ce-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.5","name":"gitlab-rails-ce-19.5","label":"gitlab-rails-ce-19.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.10","name":"gitlab-rails-ce-fips-18.10","label":"gitlab-rails-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.11","name":"gitlab-rails-ce-fips-18.11","label":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.2","name":"gitlab-rails-ce-fips-18.2","label":"gitlab-rails-ce-fips-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.3","name":"gitlab-rails-ce-fips-18.3","label":"gitlab-rails-ce-fips-18.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.4","name":"gitlab-rails-ce-fips-18.4","label":"gitlab-rails-ce-fips-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.5","name":"gitlab-rails-ce-fips-18.5","label":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.9","name":"gitlab-rails-ce-fips-18.9","label":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.0","name":"gitlab-rails-ce-fips-19.0","label":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.1","name":"gitlab-rails-ce-fips-19.1","label":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.2","name":"gitlab-rails-ce-fips-19.2","label":"gitlab-rails-ce-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.3","name":"gitlab-rails-ce-fips-19.3","label":"gitlab-rails-ce-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.4","name":"gitlab-rails-ce-fips-19.4","label":"gitlab-rails-ce-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.5","name":"gitlab-rails-ce-fips-19.5","label":"gitlab-rails-ce-fips-19.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"ruby-devise","name":"ruby-devise","label":"ruby-devise","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/ruby-devise","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"ruby-devise","name":"ruby-devise","label":"ruby-devise","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/ruby-devise","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"RubyGems","product":"devise","name":"devise","label":"devise","ecosystem":"RubyGems","cpePart":null,"purl":"pkg:gem/devise","purlType":"gem","versions":[{"text":"< 5.0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.3","eol":null,"hubHref":null},{"vendor":"heartcombo","product":"devise","name":"devise","label":"devise","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.3","eol":null,"hubHref":"/vendor/heartcombo/devise"}],"affectedCount":48,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/heartcombo/devise/security/advisories/GHSA-57hq-95w6-v4fc","label":"github.com/heartcombo/devise/security/advisories/GHSA-57hq-95w6-v4fc","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Vendor Advisory"]},{"url":"https://github.com/heartcombo/devise/issues/5783","label":"github.com/heartcombo/devise/issues/5783","hostname":"github.com","tags":["X Refsource MISC","REPORT","WEB","Issue Tracking"]},{"url":"https://github.com/heartcombo/devise/pull/5784","label":"github.com/heartcombo/devise/pull/5784","hostname":"github.com","tags":["X Refsource MISC","REPORT","FIX","WEB","Issue Tracking","Patch"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/devise/GHSA-57hq-95w6-v4fc.yml","label":"github.com/rubysec/ruby-advisory-db/blob/master/gems/devise/GHSA-57hq-95w6-v4fc.yml","hostname":"github.com","tags":["X Refsource MISC","REPORT","Advisory","WEB","Broken Link"]},{"url":"https://ubuntu.com/security/CVE-2026-32700","label":"ubuntu.com/security/CVE-2026-32700","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-32700","label":"www.cve.org/CVERecord?id=CVE-2026-32700","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-32700","label":"security-tracker.debian.org/tracker/CVE-2026-32700","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32700.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32700.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32700","label":"nvd.nist.gov/vuln/detail/CVE-2026-32700","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/heartcombo/devise","label":"github.com/heartcombo/devise","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/devise/CVE-2026-32700.yml","label":"github.com/rubysec/ruby-advisory-db/blob/master/gems/devise/CVE-2026-32700.yml","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-03-18T20:55:55.034Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-03-20T18:11:56.909Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":24,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T12:47:39.739Z","stale":false,"partial":false}}