{"schemaVersion":3,"id":"CVE-2026-46604","aliases":["UBUNTU-CVE-2026-46604","DEBIAN-CVE-2026-46604","CGA-39f6-8prp-39r3","CGA-3hjq-6x9q-cf8g","CGA-3j62-q3rh-4jh5","CGA-4hfj-2vjw-whmq","CGA-5fv3-qqwv-rc3w","CGA-67cw-qc5v-j238","CGA-6h4x-jv9r-x8wm","CGA-73rw-rwvg-74hh","CGA-7chj-2954-3398","CGA-7gpm-xxqc-x9gc","CGA-99fm-7vh5-7487","CGA-9h55-37fr-xj4j","CGA-crc9-w7xp-q3ww","CGA-f3wg-6h3q-r24x","CGA-gf36-p4rm-hghg","CGA-grf2-734p-h736","CGA-h3gv-qch4-jq2m","CGA-h957-3cqc-4xx3","CGA-j2wh-gxcj-88ww","CGA-mg2p-6cpc-c966","CGA-p4rq-9ww6-29qj","CGA-qcc5-4mhq-hmf3","CGA-qj68-xgwg-mhwp","CGA-r2xw-4fgw-p9hx","CGA-r96m-g3rr-4cmf","CGA-r9mc-9h9f-8992","CGA-rmjf-cg5w-v7q9","CGA-rpcp-72gw-hccc","CGA-w3rv-3qgc-xrrv","CGA-wh5h-qgpc-2h8w","CGA-wj5v-6mf6-p92m","CGA-xcg4-q53m-pw85","GO-2026-5066","openSUSE-SU-2026:11155-1","openSUSE-SU-2026:11176-1","openSUSE-SU-2026:21230-1","CGA-26jj-hvfv-4fxj","CGA-2h2q-47hm-f287","CGA-2hg7-m8jw-pxcw","CGA-2r64-qqw7-q64g","CGA-2rv5-x5p7-58p6","CGA-343v-5493-9gqg","CGA-34j6-h32v-m5w5","CGA-3792-v8m7-wjgx","CGA-3c75-h8q4-4399","CGA-3fh7-rpwc-58vp","CGA-3w75-cxj8-r6qw","CGA-424m-m4v9-49wj","CGA-458v-j8jc-p9w4","CGA-4988-4gw5-cq4f","CGA-4c86-2w8p-h762","CGA-4fw5-gr88-3fhj","CGA-4pj6-mwvw-89hq","CGA-4r7m-r323-2f99","CGA-4w4c-7jp6-w47q","CGA-55p4-jx5p-5jc3","CGA-593q-w6wf-f36p","CGA-5r6g-fwrj-q786","CGA-5v2c-58vh-fwh2","CGA-5x57-p8wj-jjw7","CGA-62q5-9h5j-g38q","CGA-666q-9g95-jh4j","CGA-66p5-hpj7-j6m9","CGA-6c8x-cj2j-4g6r","CGA-6fh4-9p7m-7xqp","CGA-6vfv-2rwq-wq22","CGA-725f-wvf5-qcrp","CGA-7655-53ff-92wj","CGA-7cmc-hr42-99jj","CGA-7fqm-hmm9-p2j4","CGA-7hgv-jhgf-f265","CGA-83gx-fj67-vr87","CGA-85f7-j29x-r8gw","CGA-8f6h-fxj8-xvqh","CGA-8gwx-w8pg-7mvj","CGA-8q9p-rmp8-cpmr","CGA-8xch-m73p-f33j","CGA-929w-84c5-m76j","CGA-9629-v66j-7m7f","CGA-9j4c-hh93-c5xw","CGA-9jjq-ggmc-w9vx","CGA-9qr5-8h54-9x78","CGA-9v22-9f34-h583","CGA-9wqc-9r9x-h874","CGA-c23w-557p-pqv5","CGA-c2c5-p25v-53wg","CGA-c7mc-fqpj-8wwg","CGA-cgcw-9rr5-xf5p","CGA-cgw5-mmxv-v363","CGA-cmpc-5cwv-m5gv","CGA-cv2c-vx47-7h8f","CGA-f2qj-95x5-g9rw","CGA-f64x-6c5f-p8hm","CGA-f6jg-48px-94x4","CGA-f6jj-gc64-68rh","CGA-f7r7-mgg2-83v3","CGA-fcpx-9m22-w9jh","CGA-fcw8-g34c-7g5w","CGA-fj4f-rv45-jf2w","CGA-fjj4-gq94-r4w8","CGA-frqh-vrwg-2gqw","CGA-fwgf-xcxm-8vf6","CGA-fxmx-fmhq-wx9f","CGA-g63x-g8c8-wp85","CGA-gc63-h59p-hvmm","CGA-gfrc-vxgw-fx3q","CGA-gjc9-c4w6-cc7x","CGA-h323-mf4v-j82c","CGA-h63h-q8p9-96pr","CGA-h8h5-2chf-3m99","CGA-hc9p-5jpj-5r4m","CGA-hcg6-rx3r-v88v","CGA-hg56-9xfr-q6xp","CGA-hjf7-pcww-mv5f","CGA-hm99-58vj-f3qc","CGA-hr7h-gq85-qh7j","CGA-hv37-x4rq-55g3","CGA-j96j-6p6w-gqv6","CGA-jqwg-wmvj-f6xh","CGA-jx9h-mmg2-vqr6","CGA-m2mc-5xv4-8889","CGA-m38g-r7mf-f79q","CGA-mf8f-p5m2-64v2","CGA-mg8r-rxmq-8h7p","CGA-mg94-mj35-cwh8","CGA-mhrm-h7gw-7r53","CGA-mxjp-9pmq-hgh3","CGA-pgp7-69hj-x5r5","CGA-pmm5-7jg5-mphw","CGA-pq46-6pq8-m45h","CGA-pq68-5wrr-7fmr","CGA-pq6c-phcf-hq2c","CGA-qq87-6g2q-qr32","CGA-qx6f-qgvf-p4cq","CGA-r4m5-jxr9-2vmw","CGA-r8qp-5m3p-jhjg","CGA-rg6f-j354-gfj2","CGA-rj2f-vw9v-w8mj","CGA-rj46-7frv-q9wr","CGA-rqq5-m5v4-qcv3","CGA-rrg4-4v45-wmgf","CGA-v547-6wg2-jgc6","CGA-v7w6-4q8x-hm8m","CGA-vpjv-95pj-6q75","CGA-vqvj-7987-wmj4","CGA-vvc6-7rf6-2fqm","CGA-w527-v8cj-4q3v","CGA-w66j-9fcr-mx5c","CGA-wg58-wwmh-hpj2","CGA-wq4x-465f-7h5f","CGA-x3f4-6cq3-9jfm","CGA-x4jc-7mgv-5w54","CGA-x4mq-jv7f-pmwx","CGA-x572-mv3v-fmjg","CGA-x5gx-4fh2-986x","CGA-xf6v-m3c7-87x9","CGA-xr32-mcwq-2c2q","CGA-xr42-ff67-c7x4"],"status":"published","duplicateOf":null,"title":null,"description":"The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.","dates":{"published":"2026-06-26T20:22:46.377Z","modified":"2026-06-29T13:20:23.731Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00609,"percentile":0.48222,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.267,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00342},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00342,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00342,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00342,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00342,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00342,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00342,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00342,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00342,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00342,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00342,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00609,"percentile":0.48222}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00342,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00342,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00342,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00342,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00609,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00609,"percentile":0.48222}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-787","name":"Out-of-bounds Write","description":"The product writes data past the end, or before the beginning, of the intended buffer.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/787.html"}],"affected":[{"vendor":"chainguard","product":"bento","name":"bento","label":"bento","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/bento","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cg","name":"cg","label":"cg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cg","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"chainctl","name":"chainctl","label":"chainctl","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/chainctl","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"chainctl-fips","name":"chainctl-fips","label":"chainctl-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/chainctl-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-chainloop-backend","name":"commercial-chainloop-backend","label":"commercial-chainloop-backend","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-chainloop-backend","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gatus","name":"gatus","label":"gatus","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gatus","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gatus-fips","name":"gatus-fips","label":"gatus-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gatus-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.10","name":"gitlab-workhorse-ce-18.10","label":"gitlab-workhorse-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.11","name":"gitlab-workhorse-ce-18.11","label":"gitlab-workhorse-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.11","purlType":"apk","versions":[{"text":"< 18.11.6-r1","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 18.11.6-r1 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.5","name":"gitlab-workhorse-ce-18.5","label":"gitlab-workhorse-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.6","name":"gitlab-workhorse-ce-18.6","label":"gitlab-workhorse-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.7","name":"gitlab-workhorse-ce-18.7","label":"gitlab-workhorse-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.8","name":"gitlab-workhorse-ce-18.8","label":"gitlab-workhorse-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.9","name":"gitlab-workhorse-ce-18.9","label":"gitlab-workhorse-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.9","purlType":"apk","versions":[{"text":"< 18.9.8-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.8-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-19.0","name":"gitlab-workhorse-ce-19.0","label":"gitlab-workhorse-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 19.0.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 19.0.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-19.1","name":"gitlab-workhorse-ce-19.1","label":"gitlab-workhorse-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-19.1","purlType":"apk","versions":[{"text":"< 19.1.1-r1","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 19.1.1-r1 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.10","name":"gitlab-workhorse-ce-fips-18.10","label":"gitlab-workhorse-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.11","name":"gitlab-workhorse-ce-fips-18.11","label":"gitlab-workhorse-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 18.11.6-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 18.11.6-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.5","name":"gitlab-workhorse-ce-fips-18.5","label":"gitlab-workhorse-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.6","name":"gitlab-workhorse-ce-fips-18.6","label":"gitlab-workhorse-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.7","name":"gitlab-workhorse-ce-fips-18.7","label":"gitlab-workhorse-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.8","name":"gitlab-workhorse-ce-fips-18.8","label":"gitlab-workhorse-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.9","name":"gitlab-workhorse-ce-fips-18.9","label":"gitlab-workhorse-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-19.0","name":"gitlab-workhorse-ce-fips-19.0","label":"gitlab-workhorse-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-19.0","purlType":"apk","versions":[{"text":"< 19.0.3-r3","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 19.0.3-r3 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-19.1","name":"gitlab-workhorse-ce-fips-19.1","label":"gitlab-workhorse-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-19.1","purlType":"apk","versions":[{"text":"< 19.1.1-r1","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 19.1.1-r1 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glab","name":"glab","label":"glab","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glab","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hugo","name":"hugo","label":"hugo","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hugo","purlType":"apk","versions":[{"text":"< 0.163.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.163.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubescape","name":"kubescape","label":"kubescape","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubescape","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubescape-server","name":"kubescape-server","label":"kubescape-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubescape-server","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubescape-server-downloader","name":"kubescape-server-downloader","label":"kubescape-server-downloader","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubescape-server-downloader","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubescape-server-fips","name":"kubescape-server-fips","label":"kubescape-server-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubescape-server-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubescape-server-fips-downloader","name":"kubescape-server-fips-downloader","label":"kubescape-server-fips-downloader","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubescape-server-fips-downloader","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"listmonk","name":"listmonk","label":"listmonk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/listmonk","purlType":"apk","versions":[{"text":"< 6.2.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.2.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-11.0","name":"mattermost-11.0","label":"mattermost-11.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-11.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-11.1","name":"mattermost-11.1","label":"mattermost-11.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-11.1","purlType":"apk","versions":[{"text":"< 11.10.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.10.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-11.2","name":"mattermost-11.2","label":"mattermost-11.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-11.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-11.4","name":"mattermost-11.4","label":"mattermost-11.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-11.4","purlType":"apk","versions":[{"text":"< 11.4.5-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.4.5-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-11.5","name":"mattermost-11.5","label":"mattermost-11.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-11.5","purlType":"apk","versions":[{"text":"< 11.5.7-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.5.7-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-11.7","name":"mattermost-11.7","label":"mattermost-11.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-11.7","purlType":"apk","versions":[{"text":"< 11.7.6-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.7.6-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-11.8","name":"mattermost-11.8","label":"mattermost-11.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-11.8","purlType":"apk","versions":[{"text":"< 11.8.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.8.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-fips-11.0","name":"mattermost-fips-11.0","label":"mattermost-fips-11.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-fips-11.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-fips-11.1","name":"mattermost-fips-11.1","label":"mattermost-fips-11.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-fips-11.1","purlType":"apk","versions":[{"text":"< 11.10.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.10.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-fips-11.2","name":"mattermost-fips-11.2","label":"mattermost-fips-11.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-fips-11.2","purlType":"apk","versions":[{"text":"< 11.2.4-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.2.4-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-fips-11.4","name":"mattermost-fips-11.4","label":"mattermost-fips-11.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-fips-11.4","purlType":"apk","versions":[{"text":"< 11.4.5-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.4.5-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-fips-11.5","name":"mattermost-fips-11.5","label":"mattermost-fips-11.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-fips-11.5","purlType":"apk","versions":[{"text":"< 11.5.7-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.5.7-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rclone","name":"rclone","label":"rclone","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rclone","purlType":"apk","versions":[{"text":"< 1.74.3-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.74.3-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rclone-fips","name":"rclone-fips","label":"rclone-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rclone-fips","purlType":"apk","versions":[{"text":"< 1.74.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.74.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seaweedfs","name":"seaweedfs","label":"seaweedfs","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seaweedfs","purlType":"apk","versions":[{"text":"< 4.36-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.36-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seaweedfs-fips","name":"seaweedfs-fips","label":"seaweedfs-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seaweedfs-fips","purlType":"apk","versions":[{"text":"< 4.36-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.36-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seaweedfs-operator","name":"seaweedfs-operator","label":"seaweedfs-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seaweedfs-operator","purlType":"apk","versions":[{"text":"< 1.0.29-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.29-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seaweedfs-operator-fips","name":"seaweedfs-operator-fips","label":"seaweedfs-operator-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seaweedfs-operator-fips","purlType":"apk","versions":[{"text":"< 1.0.29-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.29-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tailscale","name":"tailscale","label":"tailscale","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tailscale","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"bento","name":"bento","label":"bento","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/bento","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gatus","name":"gatus","label":"gatus","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gatus","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glab","name":"glab","label":"glab","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glab","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"hugo","name":"hugo","label":"hugo","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/hugo","purlType":"apk","versions":[{"text":"< 0.163.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.163.3-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubescape","name":"kubescape","label":"kubescape","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubescape","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"mattermost-11.1","name":"mattermost-11.1","label":"mattermost-11.1","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/mattermost-11.1","purlType":"apk","versions":[{"text":"< 11.10.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.10.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"mattermost-11.4","name":"mattermost-11.4","label":"mattermost-11.4","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/mattermost-11.4","purlType":"apk","versions":[{"text":"< 11.4.5-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.4.5-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"mattermost-11.5","name":"mattermost-11.5","label":"mattermost-11.5","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/mattermost-11.5","purlType":"apk","versions":[{"text":"< 11.5.7-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.5.7-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"mattermost-11.7","name":"mattermost-11.7","label":"mattermost-11.7","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/mattermost-11.7","purlType":"apk","versions":[{"text":"< 11.7.6-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.7.6-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"rclone","name":"rclone","label":"rclone","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/rclone","purlType":"apk","versions":[{"text":"< 1.74.3-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.74.3-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"seaweedfs","name":"seaweedfs","label":"seaweedfs","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/seaweedfs","purlType":"apk","versions":[{"text":"< 4.36-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.36-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tailscale","name":"tailscale","label":"tailscale","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tailscale","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"golang-golang-x-image","name":"golang-golang-x-image","label":"golang-golang-x-image","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/golang-golang-x-image","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 0.45.0-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 0.45.0-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-golang-x-image","name":"golang-golang-x-image","label":"golang-golang-x-image","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-golang-x-image","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"golang.org/x","product":"image","name":"golang.org/x/image","label":"image","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/golang.org/x/image","purlType":"golang","versions":[{"text":"< 0.43.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.43.0","eol":null,"hubHref":null},{"vendor":"golang","product":"tiff","name":"tiff","label":"tiff","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 0.43.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.43.0","eol":null,"hubHref":"/vendor/golang/tiff"},{"vendor":"golang.org/x/image","product":"golang.org/x/image/tiff","name":"golang.org/x/image/tiff","label":"golang.org/x/image/tiff","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 0.43.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.43.0","eol":null,"hubHref":"/vendor/golangorgximage/golangorgximagetiff"},{"vendor":"opensuse","product":"keybase-client&distro=openSUSE Leap 16.0","name":"keybase-client","label":"keybase-client&distro=openSUSE Leap 16.0","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/keybase-client&distro=openSUSE Leap 16.0","purlType":"rpm","versions":[{"text":"< 6.6.3-bp160.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.6.3-bp160.1.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"keybase-client&distro=openSUSE Tumbleweed","name":"keybase-client","label":"keybase-client&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/keybase-client&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 6.6.3-2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.6.3-2.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"kitty&distro=openSUSE Tumbleweed","name":"kitty","label":"kitty&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/kitty&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 0.47.4-2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.47.4-2.1","eol":null,"hubHref":null}],"affectedCount":72,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://go.dev/cl/788421","label":"go.dev/cl/788421","hostname":"go.dev","tags":["REPORT","FIX","Patch"]},{"url":"https://go.dev/issue/80122","label":"go.dev/issue/80122","hostname":"go.dev","tags":["REPORT","Vendor Advisory"]},{"url":"https://pkg.go.dev/vuln/GO-2026-5066","label":"pkg.go.dev/vuln/GO-2026-5066","hostname":"pkg.go.dev","tags":["REPORT","Vendor Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-46604","label":"ubuntu.com/security/CVE-2026-46604","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46604","label":"www.cve.org/CVERecord?id=CVE-2026-46604","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://github.com/golang/go/issues/80122","label":"github.com/golang/go/issues/80122","hostname":"github.com","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-46604","label":"security-tracker.debian.org/tracker/CVE-2026-46604","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46604","label":"www.suse.com/security/cve/CVE-2026-46604","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://bugzilla.suse.com/1269600","label":"bugzilla.suse.com/1269600","hostname":"bugzilla.suse.com","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:21483-1","OPENSUSE-SU-2026:21599-1"],"duplicates":[],"related":["CGA-6P6P-VMPG-8R7H","OPENSUSE-SU-2026:21483-1","OPENSUSE-SU-2026:21599-1"]},"timeline":[{"kind":"published","date":"2026-06-26T20:22:46.377Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-29T13:20:23.731Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T08:26:16.296Z","stale":false,"partial":false}}