CVE-2026-14341 vulnerabilities

Vulnerabilities for packages: gitlab-cng, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-runner-fips...

CVE-2026-6336 vulnerabilities

Vulnerabilities for packages: gitlab-cng, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-runner-fips...

GHSA-G9G2-QC64-JGCJ vulnerabilities

Vulnerabilities for packages: gitlab-cng, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-runner-fips...

GHSA-86R3-Q889-HVG2 vulnerabilities

Vulnerabilities for packages: gitlab-cng, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-runner-fips...

CVE-2026-4672 vulnerabilities

Vulnerabilities for packages: gitlab-cng, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-runner-fips...

GHSA-94P8-87FF-W336 vulnerabilities

Vulnerabilities for packages: gitlab-cng, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-runner-fips...

GHSA-XR9X-R78C-5HRM vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, gitlab-rails-ce, gitlab-rails-ce-fips, pghero, pghero-fips...

CVE-2026-66066 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, gitlab-rails-ce, gitlab-rails-ce-fips, pghero, pghero-fips...

CVE-2026-54603 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.2-oauth2, gitlab-rails-ce-fips, ruby3.4-oauth2, ruby4.0-oauth2, ruby3.3-oauth2...

CVE-2026-3093 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper...

CVE-2026-62425

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-62424

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-42494

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-42495

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-42494

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-42494

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

EUVD-2026-49773

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

EUVD-2026-49774

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

EUVD-2026-49776

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-42495

The Xen hypervisor is vulnerable to a numerical overflow within the libfsimage library's iso9660 driver . The vulnerability occurs because the driver derives lengths directly from attacker-controlled on-disk fields without proper validation, specifically during the calculation of the System Use a...