{"schemaVersion":3,"id":"CVE-2026-53632","aliases":["CGA-9g6j-jx5g-crgq","CGA-fgxp-cj3r-x9p8","GHSA-v6wh-96g9-6wx3","CGA-237r-qhfr-6p94","CGA-26cf-xq2j-wv72","CGA-27h5-ff4x-2qf7","CGA-28wg-gpfp-23pp","CGA-2xvr-vgm6-frf2","CGA-37g8-882w-948m","CGA-3fjw-ffpr-4xcg","CGA-3gh5-3wr5-4pvv","CGA-3jx3-76rv-2992","CGA-3qjx-h9mh-fpgc","CGA-3vfx-99f5-73jj","CGA-3vqc-qv85-37p5","CGA-424x-pxc9-qvwr","CGA-44gj-v6vr-m9p5","CGA-457c-hff3-6fc2","CGA-47cv-55gm-5rp5","CGA-4hpm-8xq8-6gpv","CGA-4xx5-3f4w-pjr2","CGA-4xxq-3rq9-f8mw","CGA-56hh-qrjw-2cg4","CGA-58m3-qx93-vfqc","CGA-5h9h-qg6f-g5q3","CGA-5j7c-9xfg-7qmc","CGA-624v-xxqr-hh2f","CGA-62cq-w3jh-9pfq","CGA-63cq-wv6g-2f7w","CGA-64ff-vwqg-cjv2","CGA-64gf-pwgf-9g72","CGA-657q-v677-jx38","CGA-66c4-8hjp-gh6c","CGA-67h5-7hxr-56hc","CGA-6f8p-fhg4-2c6q","CGA-72pw-pwgh-5fp3","CGA-73gq-q2g7-2cgr","CGA-74hx-7f36-5v94","CGA-74x5-q7w3-vfhj","CGA-752c-9mjr-rr74","CGA-754h-x29v-w4pj","CGA-77qf-73m6-35hf","CGA-7jwm-q2m4-gvgm","CGA-7m3q-phcg-5h95","CGA-7rh3-8fpw-7vjx","CGA-7v55-69mw-8jfg","CGA-7w96-6m6c-769c","CGA-7wpx-6vjp-9mcf","CGA-8mf9-fwhm-432p","CGA-8mv6-mc5h-g24g","CGA-8q54-hj6c-7jr5","CGA-8rjm-wwp4-67wm","CGA-9265-rv4p-6v4p","CGA-92ch-5pr3-wxfp","CGA-94q8-mx5q-7q9v","CGA-96rv-cg6p-m875","CGA-9c37-7hr3-jcxf","CGA-9hjh-2gxj-376h","CGA-9mhr-mr84-pf92","CGA-c6qf-3hq3-h2rr","CGA-cc9v-33wc-8wq3","CGA-cqmx-wmph-35xc","CGA-cqxh-rfpf-vjmr","CGA-crfw-968f-3vj9","CGA-cv4p-wp92-mmjg","CGA-cw68-94j6-8mh3","CGA-f54w-v83f-c3xw","CGA-ffxw-2hmx-vrgp","CGA-fxx2-64c3-jjwf","CGA-g3mf-xghg-q634","CGA-g7w2-4fc8-46r2","CGA-gf4m-xv29-g2wp","CGA-gq6g-g259-mhcv","CGA-gxhg-cc9g-x6h2","CGA-h8jr-69wm-mcjx","CGA-hrvj-pjvv-r2p6","CGA-hw9c-52hf-mrwg","CGA-hx6f-hp7w-gfpc","CGA-hxv7-m7xm-cf9c","CGA-j33g-v6pr-mvhv","CGA-j3g9-89wq-h543","CGA-j4h5-q93p-xr59","CGA-j798-3hqj-x477","CGA-j88h-3mmg-56hc","CGA-j8xx-83g9-2rjw","CGA-jrpm-5mc4-p6h5","CGA-jx8q-p9cp-qw84","CGA-m3x8-v7gh-28v8","CGA-mcgw-h2f9-2fg8","CGA-mfv3-686g-f4pv","CGA-mprh-2j5q-9j55","CGA-p2gr-3m2q-w6v7","CGA-p567-w5w4-95h9","CGA-pm84-j9rm-cjr3","CGA-pr6w-xm4g-3h93","CGA-px67-xr8h-cxjp","CGA-q963-qchf-xq7c","CGA-qmc2-7276-f3qc","CGA-qwcg-62x5-8g24","CGA-r582-r4xx-v9jw","CGA-rpjv-f6jw-pgmm","CGA-rvg9-q468-gfqv","CGA-rvhx-f24w-cqmq","CGA-v4q9-mw3j-xq9h","CGA-vchw-fg89-85vh","CGA-vphm-3g45-x2qc","CGA-w295-rwxg-24qr","CGA-wjh8-77q2-c4jj","CGA-wqfq-5cq6-p7pf","CGA-wr7x-rv6j-fmm2","CGA-wrgh-xhm6-m4rg","CGA-wx39-qhx2-6r3v","CGA-xgj9-vv8h-9hff","CGA-xjjm-4hq4-v7w3","CGA-xm6r-2xpc-qc3f","CGA-xmww-cr5m-h32q","CGA-xp5q-7c45-5wm4"],"status":"published","duplicateOf":null,"title":null,"description":"launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the user’s NTLMv2 password hash to be leaked to an attacker-controlled SMB server. This can result in credential compromise through offline hash cracking. This vulnerability is fixed in 2.14.1.","dates":{"published":"2026-06-22T15:54:09.240Z","modified":"2026-06-22T17:30:11.939Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.5,"severity":"medium","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":5.5,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":5.5,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Npm","score":5.5,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":5.5,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":5.5,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00408,"percentile":0.33706,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":-0.019999999999999966,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00428},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00428,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00428,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00428,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00428,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00428,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00428,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00428,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00428,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00428,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00428,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00408,"percentile":0.33706}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00428,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00428,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00428,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00428,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00408,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00408,"percentile":0.33706}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-73","name":"External Control of File Name or Path","description":"The product allows user input to control or influence paths or file names that are used in filesystem operations.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/73.html"},{"id":"CWE-522","name":"Insufficiently Protected Credentials","description":"The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.","type":"weakness","status":"Incomplete","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/522.html"}],"affected":[{"vendor":"chainguard","product":"arangodb-3.11","name":"arangodb-3.11","label":"arangodb-3.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/arangodb-3.11","purlType":"apk","versions":[{"text":"< 3.11.14.5-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.11.14.5-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"arangodb-3.12","name":"arangodb-3.12","label":"arangodb-3.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/arangodb-3.12","purlType":"apk","versions":[{"text":"< 3.12.9.4-r19","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.9.4-r19","eol":null,"hubHref":null},{"vendor":"chainguard","product":"argo-workflows-ui-3.6","name":"argo-workflows-ui-3.6","label":"argo-workflows-ui-3.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/argo-workflows-ui-3.6","purlType":"apk","versions":[{"text":"< 3.6.19-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.19-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.1","name":"commercial-gitlab-rails-ee-19.1","label":"commercial-gitlab-rails-ee-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.1","purlType":"apk","versions":[{"text":"< 19.1.7-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.7-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.2","name":"commercial-gitlab-rails-ee-19.2","label":"commercial-gitlab-rails-ee-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.3","name":"commercial-gitlab-rails-ee-19.3","label":"commercial-gitlab-rails-ee-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.4","name":"commercial-gitlab-rails-ee-19.4","label":"commercial-gitlab-rails-ee-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.1","name":"commercial-gitlab-rails-ee-fips-19.1","label":"commercial-gitlab-rails-ee-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.2","name":"commercial-gitlab-rails-ee-fips-19.2","label":"commercial-gitlab-rails-ee-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.3","name":"commercial-gitlab-rails-ee-fips-19.3","label":"commercial-gitlab-rails-ee-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.4","name":"commercial-gitlab-rails-ee-fips-19.4","label":"commercial-gitlab-rails-ee-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.10","name":"gitlab-rails-ce-18.10","label":"gitlab-rails-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.11","name":"gitlab-rails-ce-18.11","label":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.5","name":"gitlab-rails-ce-18.5","label":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.0","name":"gitlab-rails-ce-19.0","label":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.1","name":"gitlab-rails-ce-19.1","label":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1","purlType":"apk","versions":[{"text":"< 19.1.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.10","name":"gitlab-rails-ce-fips-18.10","label":"gitlab-rails-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.10","purlType":"apk","versions":[{"text":"< 18.10.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.10.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.11","name":"gitlab-rails-ce-fips-18.11","label":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11","purlType":"apk","versions":[{"text":"< 18.11.12-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.12-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.5","name":"gitlab-rails-ce-fips-18.5","label":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.9","name":"gitlab-rails-ce-fips-18.9","label":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9","purlType":"apk","versions":[{"text":"< 18.9.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.0","name":"gitlab-rails-ce-fips-19.0","label":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0","purlType":"apk","versions":[{"text":"< 19.0.9-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.9-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.1","name":"gitlab-rails-ce-fips-19.1","label":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1","purlType":"apk","versions":[{"text":"< 19.1.7-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.7-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.2","name":"gitlab-rails-ce-fips-19.2","label":"gitlab-rails-ce-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.2","purlType":"apk","versions":[{"text":"< 19.2.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-2-worker","name":"langfuse-2-worker","label":"langfuse-2-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-2-worker","purlType":"apk","versions":[{"text":"< 2.95.12-r32","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.95.12-r32","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-2-worker","name":"langfuse-fips-2-worker","label":"langfuse-fips-2-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-2-worker","purlType":"apk","versions":[{"text":"< 2.95.12-r35","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.95.12-r35","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-33","name":"nextcloud-server-33","label":"nextcloud-server-33","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-33","purlType":"apk","versions":[{"text":"< 33.0.6-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 33.0.6-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-34","name":"nextcloud-server-34","label":"nextcloud-server-34","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-34","purlType":"apk","versions":[{"text":"< 34.0.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 34.0.1-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nextcloud-server-33","name":"nextcloud-server-33","label":"nextcloud-server-33","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nextcloud-server-33","purlType":"apk","versions":[{"text":"< 33.0.6-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 33.0.6-r2","eol":null,"hubHref":null},{"vendor":"Npm","product":"launch-editor","name":"launch-editor","label":"launch-editor","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/launch-editor","purlType":"npm","versions":[{"text":"< 2.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.14.1","eol":null,"hubHref":null},{"vendor":"Npm","product":"vite","name":"vite","label":"vite","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/vite","purlType":"npm","versions":[{"text":"≥ 8.0.0, < 8.0.16","noFixRecorded":false,"fixedIn":null},{"text":"≥ 7.0.0, < 7.3.5","noFixRecorded":false,"fixedIn":null},{"text":"< 6.4.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 8.0.0, < 8.0.16 | ≥ 7.0.0, < 7.3.5 | < 6.4.3","eol":null,"hubHref":null},{"vendor":"Npm","product":"vite-plus","name":"vite-plus","label":"vite-plus","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/vite-plus","purlType":"npm","versions":[{"text":"< 0.1.24","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.24","eol":null,"hubHref":null},{"vendor":"vitejs","product":"launch-editor","name":"launch-editor","label":"launch-editor","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.14.1","eol":null,"hubHref":"/vendor/vitejs/launch-editor"},{"vendor":"vitejs","product":"vite","name":"vite","label":"vite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 8.0.0, < 8.0.16","noFixRecorded":false,"fixedIn":null},{"text":"≥ 7.0.0, < 7.3.5","noFixRecorded":false,"fixedIn":null},{"text":"< 6.4.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 8.0.0, < 8.0.16 | ≥ 7.0.0, < 7.3.5 | < 6.4.3","eol":null,"hubHref":"/vendor/vitejs/vite"},{"vendor":"vitejs","product":"vite-plus","name":"vite-plus","label":"vite-plus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 0.1.24","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.24","eol":null,"hubHref":"/vendor/vitejs/vite-plus"}],"affectedCount":43,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/vitejs/launch-editor/security/advisories/GHSA-v6wh-96g9-6wx3","label":"github.com/vitejs/launch-editor/security/advisories/GHSA-v6wh-96g9-6wx3","hostname":"github.com","tags":["X Refsource CONFIRM","Advisory","WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53632.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53632.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53632","label":"nvd.nist.gov/vuln/detail/CVE-2026-53632","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/vitejs/launch-editor","label":"github.com/vitejs/launch-editor","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:11680-1","OPENSUSE-SU-2026:21448-1"],"duplicates":[],"related":["CGA-JJ9Q-X9WW-JF9R","OPENSUSE-SU-2026:11680-1","OPENSUSE-SU-2026:21448-1"]},"timeline":[{"kind":"published","date":"2026-06-22T15:54:09.240Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-22T17:30:11.939Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":22,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T09:27:35.465Z","stale":false,"partial":false}}