{"schemaVersion":3,"id":"CVE-2026-46599","aliases":["UBUNTU-CVE-2026-46599","DEBIAN-CVE-2026-46599","CGA-3c3x-m552-99r7","CGA-76p4-5rff-c9c8","CGA-8pw6-3x5w-6233","CGA-8xqx-2722-hcj8","CGA-m529-8mqm-fqf6","CGA-mgr9-747x-72wh","CGA-q3f4-2vxg-c2v8","CGA-v3v4-pfcc-x4jr","GHSA-q675-qj96-32m9","GO-2026-5032","CGA-224r-c642-x6mv","CGA-2qc7-xgmr-m44q","CGA-2rvg-96ff-wwrj","CGA-2wm4-p39g-c259","CGA-3hjx-6jv4-m7f9","CGA-3jmm-w3wq-g3c9","CGA-3m83-4x9v-xcpj","CGA-3x9m-r74x-4w6h","CGA-4249-crx7-7pmg","CGA-4375-v5jh-6chc","CGA-43qh-47m8-6hpf","CGA-48ff-hh9w-82gv","CGA-4hff-226r-w84w","CGA-52x2-rfwq-c6cc","CGA-57m3-w2mf-6v6x","CGA-58xw-mqfh-r6gq","CGA-5j4f-rm4w-x5v7","CGA-5jv5-8gcp-54hr","CGA-5q3g-6vjm-f555","CGA-648j-jg6c-mp8w","CGA-668p-6g37-pq7r","CGA-6cm4-v376-hvgw","CGA-6fc7-54pq-hh8g","CGA-6mrw-66cr-m72r","CGA-6r7w-h5ph-7p3q","CGA-73xw-22fh-4r6p","CGA-89jh-wr6m-w5r4","CGA-8r8m-6xqj-r9hx","CGA-8xgg-5mp9-qr57","CGA-97cp-xx49-83g2","CGA-9fc4-876p-8mfx","CGA-9mgc-7g8q-43gv","CGA-9rpw-92g7-h2jr","CGA-f739-v5hr-6rwj","CGA-fpjf-8mm6-gcx5","CGA-fpp9-v5hx-wppg","CGA-g54c-q564-9hc9","CGA-g7v5-3252-h8wc","CGA-gjq2-9mmf-f959","CGA-gwgx-mj3w-v9x6","CGA-gx24-wrm3-w76v","CGA-h3rg-mc68-97p4","CGA-h4fc-32w6-gjj5","CGA-h57h-7rr5-vcqx","CGA-hff7-9583-f886","CGA-hghx-jx36-c4mg","CGA-hmr9-vvx8-8pjf","CGA-hqj6-7j5q-cqqx","CGA-j4m9-hpr3-95mj","CGA-j4x9-7q9w-frmh","CGA-j752-9v6m-2qr3","CGA-jq65-8w8v-8vq7","CGA-jrjm-rmfx-cw53","CGA-jvc8-47gj-m997","CGA-m2q5-j9mg-8jgr","CGA-mhhf-g2j2-6q5q","CGA-mj6v-f4rq-v6xc","CGA-mr8p-wx97-r4x3","CGA-mww9-m8hm-xjf5","CGA-mx87-778g-q3wg","CGA-p287-2fvq-qgm9","CGA-p696-hpww-9wc8","CGA-pc63-w4xw-xgrc","CGA-ph77-x4p3-5jrm","CGA-pvxq-5q95-w3jx","CGA-pwx8-5c7g-28hv","CGA-q53x-9732-9hf4","CGA-q9c3-52m3-wp4w","CGA-qccc-43hx-4g4f","CGA-qfp6-4qv4-r6cw","CGA-qq5v-8fq9-v45j","CGA-qq72-prhh-mfhq","CGA-qrhx-53wf-hw7g","CGA-r62m-xq5f-rr59","CGA-rmqr-jrqj-m73m","CGA-rmwf-jg7m-jf8f","CGA-v2fh-jq9f-g6cc","CGA-vm8h-mq4c-78c5","CGA-vq29-43jc-g5rw","CGA-vvx9-gvvp-fhvx","CGA-w6fv-369m-x63h","CGA-wvqx-f5mm-wc3w","CGA-wxfm-6r95-hqrp","CGA-x3fr-vvhw-fhjx","CGA-x76h-rfwr-hfj2","CGA-xff9-8g4w-mv4p","CGA-xph9-p6qc-g5h4","CGA-xq85-4qx8-j8gm","CGA-xrwp-5rcr-2qrp","CGA-xwp5-f8wq-7qw7"],"status":"published","duplicateOf":null,"title":null,"description":"The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed data.","dates":{"published":"2026-05-29T19:35:33.539Z","modified":"2026-06-01T14:44:03.725Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Go","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0063,"percentile":0.49246,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.27699999999999997,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00353},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0063,"percentile":0.49246}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0063,"percentile":0.49246}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-770","name":"Allocation of Resources Without Limits or Throttling","description":"The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/770.html"}],"affected":[{"vendor":"chainguard","product":"cg","name":"cg","label":"cg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cg","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"chainctl","name":"chainctl","label":"chainctl","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/chainctl","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"chainctl-fips","name":"chainctl-fips","label":"chainctl-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/chainctl-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-chainloop-backend","name":"commercial-chainloop-backend","label":"commercial-chainloop-backend","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-chainloop-backend","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gatus","name":"gatus","label":"gatus","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gatus","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gatus-fips","name":"gatus-fips","label":"gatus-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gatus-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.10","name":"gitlab-workhorse-ce-18.10","label":"gitlab-workhorse-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.10","purlType":"apk","versions":[{"text":"< 18.10.8-r1","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 18.10.8-r1 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.4","name":"gitlab-workhorse-ce-18.4","label":"gitlab-workhorse-ce-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.5","name":"gitlab-workhorse-ce-18.5","label":"gitlab-workhorse-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.6","name":"gitlab-workhorse-ce-18.6","label":"gitlab-workhorse-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.7","name":"gitlab-workhorse-ce-18.7","label":"gitlab-workhorse-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.8","name":"gitlab-workhorse-ce-18.8","label":"gitlab-workhorse-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.9","name":"gitlab-workhorse-ce-18.9","label":"gitlab-workhorse-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.9","purlType":"apk","versions":[{"text":"< 18.9.8-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.8-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.10","name":"gitlab-workhorse-ce-fips-18.10","label":"gitlab-workhorse-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 18.10.8-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 18.10.8-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.4","name":"gitlab-workhorse-ce-fips-18.4","label":"gitlab-workhorse-ce-fips-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.5","name":"gitlab-workhorse-ce-fips-18.5","label":"gitlab-workhorse-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.6","name":"gitlab-workhorse-ce-fips-18.6","label":"gitlab-workhorse-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.7","name":"gitlab-workhorse-ce-fips-18.7","label":"gitlab-workhorse-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.8","name":"gitlab-workhorse-ce-fips-18.8","label":"gitlab-workhorse-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.9","name":"gitlab-workhorse-ce-fips-18.9","label":"gitlab-workhorse-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glab","name":"glab","label":"glab","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glab","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-11.0","name":"mattermost-11.0","label":"mattermost-11.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-11.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-11.2","name":"mattermost-11.2","label":"mattermost-11.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-11.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-fips-11.0","name":"mattermost-fips-11.0","label":"mattermost-fips-11.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-fips-11.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-fips-11.2","name":"mattermost-fips-11.2","label":"mattermost-fips-11.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-fips-11.2","purlType":"apk","versions":[{"text":"< 11.2.4-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.2.4-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-fips-11.4","name":"mattermost-fips-11.4","label":"mattermost-fips-11.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-fips-11.4","purlType":"apk","versions":[{"text":"< 11.4.5-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.4.5-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seaweedfs","name":"seaweedfs","label":"seaweedfs","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seaweedfs","purlType":"apk","versions":[{"text":"< 4.34-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.34-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seaweedfs-fips","name":"seaweedfs-fips","label":"seaweedfs-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seaweedfs-fips","purlType":"apk","versions":[{"text":"< 4.34-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.34-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seaweedfs-operator","name":"seaweedfs-operator","label":"seaweedfs-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seaweedfs-operator","purlType":"apk","versions":[{"text":"< 1.0.26-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.26-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seaweedfs-operator-fips","name":"seaweedfs-operator-fips","label":"seaweedfs-operator-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seaweedfs-operator-fips","purlType":"apk","versions":[{"text":"< 1.0.26-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.26-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seaweedfs-rocksdb","name":"seaweedfs-rocksdb","label":"seaweedfs-rocksdb","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seaweedfs-rocksdb","purlType":"apk","versions":[{"text":"< 4.34-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.34-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seaweedfs-rocksdb-fips","name":"seaweedfs-rocksdb-fips","label":"seaweedfs-rocksdb-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seaweedfs-rocksdb-fips","purlType":"apk","versions":[{"text":"< 4.34-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.34-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tailscale","name":"tailscale","label":"tailscale","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tailscale","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gatus","name":"gatus","label":"gatus","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gatus","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glab","name":"glab","label":"glab","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glab","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"seaweedfs","name":"seaweedfs","label":"seaweedfs","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/seaweedfs","purlType":"apk","versions":[{"text":"< 4.34-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.34-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tailscale","name":"tailscale","label":"tailscale","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tailscale","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"golang-golang-x-image","name":"golang-golang-x-image","label":"golang-golang-x-image","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/golang-golang-x-image","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 0.42.0-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 0.42.0-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-golang-x-image","name":"golang-golang-x-image","label":"golang-golang-x-image","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-golang-x-image","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"golang.org/x","product":"image","name":"golang.org/x/image","label":"image","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/golang.org/x/image","purlType":"golang","versions":[{"text":"< 0.41.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.41.0","eol":null,"hubHref":null},{"vendor":"golang.org/x/image","product":"golang.org/x/image/tiff","name":"golang.org/x/image/tiff","label":"golang.org/x/image/tiff","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 0.41.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.41.0","eol":null,"hubHref":"/vendor/golangorgximage/golangorgximagetiff"}],"affectedCount":41,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://go.dev/issue/79577","label":"go.dev/issue/79577","hostname":"go.dev","tags":["REPORT","WEB"]},{"url":"https://go.dev/cl/759960","label":"go.dev/cl/759960","hostname":"go.dev","tags":["REPORT","WEB","FIX"]},{"url":"https://groups.google.com/g/golang-announce/c/uhYX90BlBvI","label":"groups.google.com/g/golang-announce/c/uhYX90BlBvI","hostname":"groups.google.com","tags":["REPORT","WEB"]},{"url":"https://pkg.go.dev/vuln/GO-2026-5032","label":"pkg.go.dev/vuln/GO-2026-5032","hostname":"pkg.go.dev","tags":["REPORT","WEB"]},{"url":"https://ubuntu.com/security/CVE-2026-46599","label":"ubuntu.com/security/CVE-2026-46599","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46599","label":"www.cve.org/CVERecord?id=CVE-2026-46599","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://github.com/golang/go/issues/79577","label":"github.com/golang/go/issues/79577","hostname":"github.com","tags":["REPORT"]},{"url":"https://go-review.googlesource.com/c/image/+/759960","label":"go-review.googlesource.com/c/image/+/759960","hostname":"go-review.googlesource.com","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-46599","label":"security-tracker.debian.org/tracker/CVE-2026-46599","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46599","label":"nvd.nist.gov/vuln/detail/CVE-2026-46599","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://cs.opensource.google/go/x/image","label":"cs.opensource.google/go/x/image","hostname":"cs.opensource.google","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:21483-1"],"duplicates":[],"related":["CGA-9F3W-26VM-JCH7","OPENSUSE-SU-2026:21483-1"]},"timeline":[{"kind":"published","date":"2026-05-29T19:35:33.539Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-01T14:44:03.725Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T01:16:44.639Z","stale":false,"partial":false}}