DirectorySecurity AdvisoriesPricing
Sign in
Directory
commercial-gitlab-workhorse-ee logo

commercial-gitlab-workhorse-ee

packaged by Chainguard

Last changed
Request a free trial

Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.

Tags
Overview
Comparison
Provenance
Specifications
SBOM
Vulnerabilities
Advisories

Expand
CVE ID
Severity
Package
Version
Last detected
CVE-2019-19919
Critical
handlebars
1.0.0
CVE-2021-23369
Critical
handlebars
1.0.0
CVE-2021-23383
Critical
handlebars
1.0.0
CVE-2016-3956
High
npm
1.0.1
CVE-2019-16777
High
npm
1.0.1
GHSA-2cf5-4w76-r9qv
High
handlebars
1.0.0
GHSA-q2c6-c6pm-g3gh
High
handlebars
1.0.0
GHSA-q42p-pg8m-cqh6
High
handlebars
1.0.0
GHSA-g9r4-xpmj-mj65
High
handlebars
1.0.0
CVE-2019-16776
High
npm
1.0.1
CVE-2018-7408
High
npm
1.0.1
GHSA-h6ch-v84p-w6p9
High
diff
1.0.0
CVE-2019-16775
High
npm
1.0.1
CVE-2020-7712
High
json
1.0.0
CVE-2026-41636
High
thrift
0.0.0-DEVELOPMENT
CVE-2019-20920
High
handlebars
1.0.0
CVE-2026-43870
High
thrift
0.0.0-DEVELOPMENT
CVE-2020-7788
High
ini
1.0.0
CVE-2021-21353
Medium
pug
1.0.0
CVE-2024-36361
Medium
pug
1.0.0
CVE-2020-15095
Medium
npm
1.0.1
CVE-2026-15534
Medium
perl
5.44.0-r2
CVE-2015-8861
Medium
handlebars
1.0.0
CVE-2026-33532
Medium
yaml
1.0.0
CVE-2013-4116
Low
npm
1.0.1
GHSA-wx77-rp39-c6vg
Low
markdown
1.0.0
CVE-2026-24001
Low
diff
1.0.0
GO-2026-5932
Unknown
golang.org/x/crypto
v0.57.0
GO-2026-5932
Unknown
golang.org/x/crypto
v0.58.0
GO-2026-5932
Unknown
golang.org/x/crypto
v0.57.0
Last updated:


The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.