apk package
chainguard/gitlab-workhorse-ce-19.0
pkg:apk/chainguard/gitlab-workhorse-ce-19.0
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-46602 | — | < 19.0.3-r1 | 19.0.3-r1 | Jun 27, 2026 | The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption. | ||
| CVE-2026-46604 | — | < 19.0.3-r1 | 19.0.3-r1 | Jun 27, 2026 | The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset. | ||
| CVE-2026-46601 | mod | 6.5 | < 0 | 0 | Jun 25, 2026 | golang.org/x/image/webp: golang.org/x/image/webp: Denial of Service via malformed VP8 chunk in WebP images |
- CVE-2026-46602Jun 27, 2026affected < 19.0.3-r1fixed 19.0.3-r1
The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption.
- CVE-2026-46604Jun 27, 2026affected < 19.0.3-r1fixed 19.0.3-r1
The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.
- affected < 0fixed 0
golang.org/x/image/webp: golang.org/x/image/webp: Denial of Service via malformed VP8 chunk in WebP images