Skip to content
Heist/ feed
Back to feed
Unrated

Withdrawn security advisory

Type: withdrawalSources: OSVChainguard advisory: CGA-6rph-xc7x-gvhr

The source has withdrawn this advisory.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
Not specified
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 21:12 UTC · Revision 1

Source evidence

CGA-6rph-xc7x-gvhr

core-osv · Original source

Published 3 Feb 2026, 23:24 UTC

CGA-6rph-xc7x-gvhr

osv:CGA-6rph-xc7x-gvhr

gitlab-toolbox-ce-18.8

Fixed versions: Not specified

Complete source record
{
  "id": "d81a881da005288b545fb81176d80f1d4896482b9c6ce35fe1fc99f9dda2b3e4",
  "url": "https://osv.dev/vulnerability/CGA-6rph-xc7x-gvhr",
  "method": "structured",
  "payload": {
    "kind": "withdrawal",
    "title": "CGA-6rph-xc7x-gvhr",
    "summary": "CGA-6rph-xc7x-gvhr",
    "evidence": "osv:CGA-6rph-xc7x-gvhr",
    "products": [
      {
        "name": {
          "value": "gitlab-toolbox-ce-18.8",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "high",
    "structured": {
      "id": "CGA-6rph-xc7x-gvhr",
      "aliases": [
        "CGA-6rph-xc7x-gvhr"
      ],
      "metrics": [
        {
          "type": "CVSS_V4",
          "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                }
              ]
            }
          ],
          "package": {
            "name": "gitlab-toolbox-ce-18.8",
            "purl": "pkg:apk/chainguard/gitlab-toolbox-ce-18.8?arch=x86_64",
            "ecosystem": "Chainguard"
          },
          "database_specific": {
            "source": "https://advisories.cgr.dev/chainguard/v3/osv/CGA-6rph-xc7x-gvhr.json"
          },
          "ecosystem_specific": {
            "components": [
              {
                "component_name": "urllib3",
                "component_purl": "pkg:pypi/urllib3@1.26.20",
                "component_type": "python",
                "component_version": "1.26.20",
                "component_location": "/usr/lib/python3.9/site-packages/urllib3-1.26.20.dist-info/METADATA",
                "latest_event_status": "pending_upstream_fix",
                "latest_event_timestamp": "2026-02-17T20:58:00Z"
              }
            ]
          }
        }
      ],
      "modified": "2026-10-27T19:05:13.541937213Z",
      "provider": "osv",
      "upstream": [
        "CVE-2026-21441",
        "GHSA-38jv-5279-wg99"
      ],
      "references": [
        "https://lists.debian.org/debian-lts-announce/2026/01/msg00017.html",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/21xxx/CVE-2026-21441.json",
        "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
        "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
        "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21441.json",
        "https://access.redhat.com/errata/RHSA-2026:0981",
        "https://access.redhat.com/errata/RHSA-2026:0990",
        "https://access.redhat.com/errata/RHSA-2026:10184",
        "https://access.redhat.com/errata/RHSA-2026:1038",
        "https://access.redhat.com/errata/RHSA-2026:1041",
        "https://access.redhat.com/errata/RHSA-2026:1042",
        "https://access.redhat.com/errata/RHSA-2026:1086",
        "https://access.redhat.com/errata/RHSA-2026:1087",
        "https://access.redhat.com/errata/RHSA-2026:1088",
        "https://access.redhat.com/errata/RHSA-2026:1089",
        "https://access.redhat.com/errata/RHSA-2026:1166",
        "https://access.redhat.com/errata/RHSA-2026:1168",
        "https://access.redhat.com/errata/RHSA-2026:1176",
        "https://access.redhat.com/errata/RHSA-2026:1224",
        "https://access.redhat.com/errata/RHSA-2026:1226",
        "https://access.redhat.com/errata/RHSA-2026:1239",
        "https://access.redhat.com/errata/RHSA-2026:1240",
        "https://access.redhat.com/errata/RHSA-2026:1241",
        "https://access.redhat.com/errata/RHSA-2026:1254",
        "https://access.redhat.com/errata/RHSA-2026:1485",
        "https://access.redhat.com/errata/RHSA-2026:14877",
        "https://access.redhat.com/errata/RHSA-2026:1504",
        "https://access.redhat.com/errata/RHSA-2026:1546",
        "https://access.redhat.com/errata/RHSA-2026:1596",
        "https://access.redhat.com/errata/RHSA-2026:1599",
        "https://access.redhat.com/errata/RHSA-2026:1609",
        "https://access.redhat.com/errata/RHSA-2026:1618",
        "https://access.redhat.com/errata/RHSA-2026:1619",
        "https://access.redhat.com/errata/RHSA-2026:1652",
        "https://access.redhat.com/errata/RHSA-2026:1674",
        "https://access.redhat.com/errata/RHSA-2026:1676",
        "https://access.redhat.com/errata/RHSA-2026:1693",
        "https://access.redhat.com/errata/RHSA-2026:1704",
        "https://access.redhat.com/errata/RHSA-2026:1706",
        "https://access.redhat.com/errata/RHSA-2026:1712",
        "https://access.redhat.com/errata/RHSA-2026:1717",
        "https://access.redhat.com/errata/RHSA-2026:1726",
        "https://access.redhat.com/errata/RHSA-2026:1729",
        "https://access.redhat.com/errata/RHSA-2026:1730",
        "https://access.redhat.com/errata/RHSA-2026:1734",
        "https://access.redhat.com/errata/RHSA-2026:1735",
        "https://access.redhat.com/errata/RHSA-2026:1736",
        "https://access.redhat.com/errata/RHSA-2026:17456",
        "https://access.redhat.com/errata/RHSA-2026:17457",
        "https://access.redhat.com/errata/RHSA-2026:17460",
        "https://access.redhat.com/errata/RHSA-2026:17461",
        "https://access.redhat.com/errata/RHSA-2026:17462",
        "https://access.redhat.com/errata/RHSA-2026:17463",
        "https://access.redhat.com/errata/RHSA-2026:1791",
        "https://access.redhat.com/errata/RHSA-2026:1792",
        "https://access.redhat.com/errata/RHSA-2026:1793",
        "https://access.redhat.com/errata/RHSA-2026:1794",
        "https://access.redhat.com/errata/RHSA-2026:1803",
        "https://access.redhat.com/errata/RHSA-2026:1805",
        "https://access.redhat.com/errata/RHSA-2026:1942",
        "https://access.redhat.com/errata/RHSA-2026:1957",
        "https://access.redhat.com/errata/RHSA-2026:19712",
        "https://access.redhat.com/errata/RHSA-2026:2106",
        "https://access.redhat.com/errata/RHSA-2026:2126",
        "https://access.redhat.com/errata/RHSA-2026:2137",
        "https://access.redhat.com/errata/RHSA-2026:2139",
        "https://access.redhat.com/errata/RHSA-2026:2144",
        "https://access.redhat.com/errata/RHSA-2026:2256",
        "https://access.redhat.com/errata/RHSA-2026:2456",
        "https://access.redhat.com/errata/RHSA-2026:2500",
        "https://access.redhat.com/errata/RHSA-2026:25127",
        "https://access.redhat.com/errata/RHSA-2026:2563",
        "https://access.redhat.com/errata/RHSA-2026:2681",
        "https://access.redhat.com/errata/RHSA-2026:2695",
        "https://access.redhat.com/errata/RHSA-2026:2717",
        "https://access.redhat.com/errata/RHSA-2026:2718",
        "https://access.redhat.com/errata/RHSA-2026:2723",
        "https://access.redhat.com/errata/RHSA-2026:2728",
        "https://access.redhat.com/errata/RHSA-2026:2760",
        "https://access.redhat.com/errata/RHSA-2026:2762",
        "https://access.redhat.com/errata/RHSA-2026:2764",
        "https://access.redhat.com/errata/RHSA-2026:2765",
        "https://access.redhat.com/errata/RHSA-2026:28043",
        "https://access.redhat.com/errata/RHSA-2026:28441",
        "https://access.redhat.com/errata/RHSA-2026:2900",
        "https://access.redhat.com/errata/RHSA-2026:2911",
        "https://access.redhat.com/errata/RHSA-2026:2919",
        "https://access.redhat.com/errata/RHSA-2026:2924",
        "https://access.redhat.com/errata/RHSA-2026:2925",
        "https://access.redhat.com/errata/RHSA-2026:2926",
        "https://access.redhat.com/errata/RHSA-2026:3296",
        "https://access.redhat.com/errata/RHSA-2026:33154",
        "https://access.redhat.com/errata/RHSA-2026:3406",
        "https://access.redhat.com/errata/RHSA-2026:3444",
        "https://access.redhat.com/errata/RHSA-2026:3461",
        "https://access.redhat.com/errata/RHSA-2026:3462",
        "https://access.redhat.com/errata/RHSA-2026:3713",
        "https://access.redhat.com/errata/RHSA-2026:3782",
        "https://access.redhat.com/errata/RHSA-2026:3869",
        "https://access.redhat.com/errata/RHSA-2026:3874",
        "https://access.redhat.com/errata/RHSA-2026:3884",
        "https://access.redhat.com/errata/RHSA-2026:3960",
        "https://access.redhat.com/errata/RHSA-2026:4185",
        "https://access.redhat.com/errata/RHSA-2026:4215",
        "https://access.redhat.com/errata/RHSA-2026:4271",
        "https://access.redhat.com/errata/RHSA-2026:4466",
        "https://access.redhat.com/errata/RHSA-2026:4467",
        "https://access.redhat.com/errata/RHSA-2026:5459",
        "https://access.redhat.com/errata/RHSA-2026:6287",
        "https://access.redhat.com/errata/RHSA-2026:6292",
        "https://access.redhat.com/errata/RHSA-2026:8151",
        "https://access.redhat.com/errata/RHSA-2026:8500",
        "https://access.redhat.com/errata/RHSA-2026:8501",
        "https://access.redhat.com/security/cve/CVE-2026-21441",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2427726",
        "https://access.redhat.com/errata/RHSA-2026:41928",
        "https://access.redhat.com/errata/RHSA-2026:44696",
        "https://access.redhat.com/errata/RHSA-2026:51357",
        "https://access.redhat.com/errata/RHSA-2026:61628"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2026-21441",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 468365,
  "published_at": "2026-02-03T23:24:41+00:00"
}