{"schemaVersion":3,"id":"CVE-2026-54297","aliases":["UBUNTU-CVE-2026-54297","DEBIAN-CVE-2026-54297","CGA-2936-rj4f-hp7p","CGA-3545-5m92-65c6","CGA-646v-gh9c-gc37","CGA-67gh-4rm4-p2pm","CGA-6q96-c93r-9fm9","CGA-6xc8-cg9q-fgmh","CGA-7969-xgjv-4xrx","CGA-7gvv-v8mp-88rr","CGA-c683-gjhm-56hg","CGA-cgv7-x9g7-hv5c","CGA-cv3p-8w4x-p8q7","CGA-fg3q-h85f-4hcw","CGA-fmvx-w997-v348","CGA-hjg7-6v4g-mh74","CGA-jwpq-w4pg-g3cx","CGA-p494-6qj7-pcg4","CGA-p57g-hq5f-3mm6","CGA-qh8v-95jv-j5rw","CGA-v46p-w684-m59f","CGA-w6m6-h4jp-wpq4","CGA-23h4-43xg-6pjr","CGA-2425-rrmm-7vxc","CGA-26x3-qfxw-rp7r","CGA-27h8-qvrw-f2m9","CGA-289c-v6cx-fx5f","CGA-2rwh-cp2j-fr8r","CGA-399h-335g-48h6","CGA-3g9v-386f-gvcm","CGA-3pw7-2hmc-j93q","CGA-3vx3-5mvh-x53h","CGA-443g-jf3x-466w","CGA-466h-96gq-9243","CGA-4j4v-w48x-6vmr","CGA-52j6-8hjq-pjv4","CGA-5jqf-h575-3mgw","CGA-5x7g-wrmp-c7rv","CGA-63p7-w63f-9g9h","CGA-6739-4xvp-r3m4","CGA-67gm-59r9-qpp3","CGA-6v85-269c-fwj7","CGA-74p5-6j66-2q85","CGA-7gvr-m3rw-52mf","CGA-8q5v-7wxp-6f56","CGA-8qqx-3fw5-c9rg","CGA-95h3-9rwp-6qqv","CGA-97c9-w7fc-77r5","CGA-9f76-hjwf-5x67","CGA-9q94-vv2w-5qqv","CGA-c254-3f6g-62r6","CGA-c3fh-gj7q-xx4r","CGA-c4v6-xv3v-3rc3","CGA-cf26-8xfc-fhg7","CGA-cfpr-hgwh-p79g","CGA-cxcc-q6wv-jm7w","CGA-gcf3-4rfv-5q23","CGA-gv77-fh6x-pcxj","CGA-gxvw-8cg5-h6v5","CGA-h4cm-6vrc-6qrj","CGA-h4jm-prp2-68xv","CGA-h849-3r7h-77qc","CGA-hp77-jvhp-h8fx","CGA-j39p-cvcp-2vwr","CGA-j545-2qfq-2cqv","CGA-j54h-8jqq-f89q","CGA-jc6g-h7q2-7c57","CGA-jhcq-586h-rwqj","CGA-jj3v-7mq7-366f","CGA-jm5m-rwhx-2f8c","CGA-jmqf-3cv2-r59v","CGA-jq4x-wf9h-h3f7","CGA-jr94-5v23-v4xc","CGA-jxqf-63xh-6w2v","CGA-m62c-mcwh-wwmf","CGA-mgqj-vpvc-fpvx","CGA-mxwc-f2vv-8xc3","CGA-prfm-cr38-v2gg","GHSA-98m9-hrrm-r99r","CGA-pxj8-rx83-fhcj","CGA-q525-79mg-7c8q","CGA-r93h-r26v-c69g","CGA-rmjx-896j-9v7g","CGA-rqh9-5g8f-v4jx","CGA-rxcr-pmj3-7x44","CGA-v247-658c-vxv9","CGA-v64x-3qvq-xg6r","CGA-v9v2-rvwg-gh4f","CGA-vh4q-42x4-mg6m","CGA-vmgx-7rp9-ffcq","CGA-w3wr-437c-545f","CGA-w4qw-v2hp-364w","CGA-wwvm-4g33-j2hp","CGA-x3px-xjmq-v6xw","CGA-x477-3vf8-7qcp","CGA-xfgg-f3v5-j7h8","CGA-xjcc-rvp5-h443","CGA-xqcq-w33j-5hg5","CGA-xrgh-9c5h-8v78"],"status":"published","duplicateOf":null,"title":null,"description":"Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. From 1.0.0 until 1.10.6 and 2.14.3, Faraday::NestedParamsEncoder, the default nested query parameter encoder/decoder in Faraday, decodes nested query strings without enforcing a maximum nesting depth. A crafted query string causes Faraday to build a deeply nested Ruby Hash structure. The internal dehash routine then recursively walks this attacker-controlled structure without a depth limit. At sufficient depth, Ruby raises an uncaught SystemStackError (stack level too deep), crashing the calling thread or worker. This can lead to denial of service in applications that pass attacker-controlled query strings to Faraday's nested query parsing or URL-building paths. This vulnerability is fixed in 1.10.6 and 2.14.3.","dates":{"published":"2026-06-24T15:50:08.949Z","modified":"2026-08-14T12:04:27.246Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Rubygems","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00757,"percentile":0.54417,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.27,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00487},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00487,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00487,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00487,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00487,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00487,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00487,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00487,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00487,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00487,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00487,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00757,"percentile":0.54417}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00487,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00487,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00487,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00487,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00757,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00757,"percentile":0.54417}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_LOSTISLAND_FARADAY","name":"Faraday","source":"github","url":"https://github.com/lostisland/faraday/security/advisories/GHSA-5rv5-xj5j-3484","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-674","name":"Uncontrolled Recursion","description":"The product does not properly control the amount of recursion that takes place,  consuming excessive resources, such as allocated memory or the program stack.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/674.html"},{"id":"CWE-770","name":"Allocation of Resources Without Limits or Throttling","description":"The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/770.html"}],"affected":[{"vendor":"chainguard","product":"cinc-auditor","name":"cinc-auditor","label":"cinc-auditor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cinc-auditor","purlType":"apk","versions":[{"text":"< 7.1.7-r5","noFixRecorded":false,"fixedIn":null},{"text":"< 7.1.7-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.7-r5 | < 7.1.7-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.1","name":"commercial-gitlab-rails-ee-19.1","label":"commercial-gitlab-rails-ee-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.1","name":"commercial-gitlab-rails-ee-fips-19.1","label":"commercial-gitlab-rails-ee-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.11","name":"gitlab-exporter-18.11","label":"gitlab-exporter-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.11","purlType":"apk","versions":[{"text":"< 18.11.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-19.0","name":"gitlab-exporter-19.0","label":"gitlab-exporter-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-19.0","purlType":"apk","versions":[{"text":"< 19.0.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-19.1","name":"gitlab-exporter-19.1","label":"gitlab-exporter-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-19.1","purlType":"apk","versions":[{"text":"< 19.1.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.10","name":"gitlab-rails-ce-18.10","label":"gitlab-rails-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.11","name":"gitlab-rails-ce-18.11","label":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11","purlType":"apk","versions":[{"text":"< 18.11.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.5","name":"gitlab-rails-ce-18.5","label":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.0","name":"gitlab-rails-ce-19.0","label":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.1","name":"gitlab-rails-ce-19.1","label":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.10","name":"gitlab-rails-ce-fips-18.10","label":"gitlab-rails-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.11","name":"gitlab-rails-ce-fips-18.11","label":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11","purlType":"apk","versions":[{"text":"< 18.11.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.5","name":"gitlab-rails-ce-fips-18.5","label":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.9","name":"gitlab-rails-ce-fips-18.9","label":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.0","name":"gitlab-rails-ce-fips-19.0","label":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0","purlType":"apk","versions":[{"text":"< 19.0.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.1","name":"gitlab-rails-ce-fips-19.1","label":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kube-fluentd-operator","name":"kube-fluentd-operator","label":"kube-fluentd-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kube-fluentd-operator","purlType":"apk","versions":[{"text":"< 1.18.2-r71","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r71","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19","name":"logstash-8.19","label":"logstash-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19","purlType":"apk","versions":[{"text":"< 8.19.16-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.16-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-iamguarded-compat","name":"logstash-8.19-iamguarded-compat","label":"logstash-8.19-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.19.16-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.16-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-with-output-opensearch","name":"logstash-8.19-with-output-opensearch","label":"logstash-8.19-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.19.16-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.16-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1","name":"logstash-9.1","label":"logstash-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-bitnami-compat","name":"logstash-9.1-bitnami-compat","label":"logstash-9.1-bitnami-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-bitnami-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-iamguarded-compat","name":"logstash-9.1-iamguarded-compat","label":"logstash-9.1-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-with-output-opensearch","name":"logstash-9.1-with-output-opensearch","label":"logstash-9.1-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-with-output-opensearch","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2","name":"logstash-9.2","label":"logstash-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-iamguarded-compat","name":"logstash-9.2-iamguarded-compat","label":"logstash-9.2-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-with-output-opensearch","name":"logstash-9.2-with-output-opensearch","label":"logstash-9.2-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-with-output-opensearch","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.4","name":"logstash-9.4","label":"logstash-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.4","purlType":"apk","versions":[{"text":"< 9.4.2-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.2-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.4-iamguarded-compat","name":"logstash-9.4-iamguarded-compat","label":"logstash-9.4-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.4.2-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.2-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.4","name":"logstash-fips-9.4","label":"logstash-fips-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.4","purlType":"apk","versions":[{"text":"< 9.4.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.2-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.4-iamguarded-compat","name":"logstash-fips-9.4-iamguarded-compat","label":"logstash-fips-9.4-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.4.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.2-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-faraday-1.10.3","name":"ruby3.2-faraday-1.10.3","label":"ruby3.2-faraday-1.10.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-faraday-1.10.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-kube-logging-operator-fluentd-outputs","name":"ruby3.2-kube-logging-operator-fluentd-outputs","label":"ruby3.2-kube-logging-operator-fluentd-outputs","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-kube-logging-operator-fluentd-outputs","purlType":"apk","versions":[{"text":"< 6.7.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.7.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.3-faraday","name":"ruby3.3-faraday","label":"ruby3.3-faraday","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.3-faraday","purlType":"apk","versions":[{"text":"< 2.14.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.14.3-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.4-kube-logging-operator-fluentd-outputs","name":"ruby3.4-kube-logging-operator-fluentd-outputs","label":"ruby3.4-kube-logging-operator-fluentd-outputs","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.4-kube-logging-operator-fluentd-outputs","purlType":"apk","versions":[{"text":"< 6.7.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.7.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"cinc-auditor","name":"cinc-auditor","label":"cinc-auditor","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/cinc-auditor","purlType":"apk","versions":[{"text":"< 7.1.7-r5","noFixRecorded":false,"fixedIn":null},{"text":"< 7.1.7-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.7-r5 | < 7.1.7-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kube-fluentd-operator","name":"kube-fluentd-operator","label":"kube-fluentd-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kube-fluentd-operator","purlType":"apk","versions":[{"text":"< 1.18.2-r71","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r71","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.4","name":"logstash-9.4","label":"logstash-9.4","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.4","purlType":"apk","versions":[{"text":"< 9.4.2-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.2-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.4-iamguarded-compat","name":"logstash-9.4-iamguarded-compat","label":"logstash-9.4-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.4.2-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.2-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.2-kube-logging-operator-fluentd-outputs","name":"ruby3.2-kube-logging-operator-fluentd-outputs","label":"ruby3.2-kube-logging-operator-fluentd-outputs","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.2-kube-logging-operator-fluentd-outputs","purlType":"apk","versions":[{"text":"< 6.7.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.7.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.3-faraday","name":"ruby3.3-faraday","label":"ruby3.3-faraday","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.3-faraday","purlType":"apk","versions":[{"text":"< 2.14.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.14.3-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.4-kube-logging-operator-fluentd-outputs","name":"ruby3.4-kube-logging-operator-fluentd-outputs","label":"ruby3.4-kube-logging-operator-fluentd-outputs","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.4-kube-logging-operator-fluentd-outputs","purlType":"apk","versions":[{"text":"< 6.7.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.7.0-r5","eol":null,"hubHref":null},{"vendor":"debian","product":"ruby-faraday","name":"ruby-faraday","label":"ruby-faraday","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/ruby-faraday","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.14.3-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.14.3-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"ruby-faraday","name":"ruby-faraday","label":"ruby-faraday","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/ruby-faraday","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"faraday_project","product":"faraday","name":"faraday","label":"faraday","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.0.0, < 1.10.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.0.0, < 2.14.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.0.0, < 1.10.6 | ≥ 2.0.0, < 2.14.3","eol":null,"hubHref":"/vendor/faraday_project/faraday"},{"vendor":"RubyGems","product":"faraday","name":"faraday","label":"faraday","ecosystem":"RubyGems","cpePart":null,"purl":"pkg:gem/faraday","purlType":"gem","versions":[{"text":"≥ 2.0.0, < 2.14.3","noFixRecorded":false,"fixedIn":null},{"text":"≥ 1.0.0, < 1.10.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.0.0, < 2.14.3 | ≥ 1.0.0, < 1.10.6","eol":null,"hubHref":null},{"vendor":"lostisland","product":"faraday","name":"faraday","label":"faraday","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.0.0, < 1.10.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.0.0.alpha.pre.1, < 2.14.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.0.0, < 1.10.6 | ≥ 2.0.0.alpha.pre.1, < 2.14.3","eol":null,"hubHref":"/vendor/lostisland/faraday"}],"affectedCount":61,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/lostisland/faraday/security/advisories/GHSA-98m9-hrrm-r99r","label":"github.com/lostisland/faraday/security/advisories/GHSA-98m9-hrrm-r99r","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Exploit","Mitigation","Vendor Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-54297","label":"access.redhat.com/security/cve/CVE-2026-54297","hostname":"access.redhat.com","tags":["VDB Entry","X Refsource REDHAT","Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492252","label":"bugzilla.redhat.com/show_bug.cgi?id=2492252","hostname":"bugzilla.redhat.com","tags":["Issue Tracking","X Refsource REDHAT","REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54297.json","label":"security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54297.json","hostname":"security.access.redhat.com","tags":["X Sadp Csaf Vex","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:50223","label":"access.redhat.com/errata/RHSA-2026:50223","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:50222","label":"access.redhat.com/errata/RHSA-2026:50222","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:50263","label":"access.redhat.com/errata/RHSA-2026:50263","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:50221","label":"access.redhat.com/errata/RHSA-2026:50221","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-54297","label":"ubuntu.com/security/CVE-2026-54297","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54297","label":"www.cve.org/CVERecord?id=CVE-2026-54297","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-54297","label":"security-tracker.debian.org/tracker/CVE-2026-54297","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54297.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54297.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54297","label":"nvd.nist.gov/vuln/detail/CVE-2026-54297","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/lostisland/faraday/pull/1681","label":"github.com/lostisland/faraday/pull/1681","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/lostisland/faraday","label":"github.com/lostisland/faraday","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/lostisland/faraday/releases/tag/v1.10.6","label":"github.com/lostisland/faraday/releases/tag/v1.10.6","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/lostisland/faraday/releases/tag/v2.14.3","label":"github.com/lostisland/faraday/releases/tag/v2.14.3","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["RHSA-2026:50221","RHSA-2026:50222","RHSA-2026:50223","RHSA-2026:50263"],"duplicates":[],"related":["CGA-33C2-MVP8-WWF2"]},"timeline":[{"kind":"published","date":"2026-06-24T15:50:08.949Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-14T12:04:27.246Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":40,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T14:32:52.116Z","stale":false,"partial":false}}