GHSA-98M9-HRRM-R99R vulnerabilities

Vulnerabilities for packages: cinc-auditor, ruby3.3-faraday, kube-logging-operator, logstash-fips, gitlab-cng, gitlab-rails-ce, logstash, kube-fluentd-operator, gitlab-rails-ce-fips...

Fedora 44 : singularity-ce (2026-63ae478575)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-63ae478575 advisory. Upgrade to 4.4.2 upstream version. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Fedora 43 : singularity-ce (2026-5358fb95a0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5358fb95a0 advisory. Upgrade to 4.4.2 upstream version. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

CVE-2026-10850

Plane CE 1.3.1 allows a low-privileged project member to submit arbitrary HTML/JS in the descriptionhtml field when creating an intake work item through the API v1 intake endpoint...

EUVD-2026-37732

Plane CE 1.3.1 allows a low-privileged project member to submit arbitrary HTML/JS in the descriptionhtml field when creating an intake work item through the API v1 intake endpoint...

Linux Distros Unpatched Vulnerability : CVE-2026-9204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain...

CVE-2026-10733

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that could have allowed an authenticated user to cause denial of service on the CI/CD Catalog page due to improper sanitization...

CVE-2026-1500 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to cause denial of service due to uncontrolled resource consumption when processing ...

CVE-2026-3553 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to access confidential issue details due to incorrect authorization checks...

CVE-2026-3553

GitLab CE/EE was vulnerable to an incorrect authorization check that could allow an authenticated user to view confidential issue details. Affected versions were all 12.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2. The issue has been remediated in patch releases: GitLab 18.10.8,...

CVE-2026-6269 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to modify hidden merge requests due to incorrect...

CVE-2026-7250 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper input validation in the API request...

GHSA-8P34-64R3-MWG8 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.2-rails, ruby4.0-rails, truffleruby, kube-logging-operator, logstash-fips, jruby, ruby3.4-rails, gitlab-rails-ce, logstash, kube-fluentd-operator, gitlab-rails-ce-fips...

GHSA-46Q3-7GV7-QMGG vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.2-rails, ruby4.0-rails, truffleruby, kube-logging-operator, logstash-fips, jruby, ruby3.4-rails, gitlab-rails-ce, logstash, kube-fluentd-operator, gitlab-rails-ce-fips...

GHSA-C4FP-CXRR-MJ66 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.2-rails, ruby4.0-rails, truffleruby, kube-logging-operator, logstash-fips, jruby, ruby3.4-rails, gitlab-rails-ce, logstash, kube-fluentd-operator, gitlab-rails-ce-fips...

CVE-2026-47241 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.2-rails, ruby4.0-rails, truffleruby, kube-logging-operator, logstash-fips, jruby, ruby3.4-rails, gitlab-rails-ce, logstash, kube-fluentd-operator, gitlab-rails-ce-fips...

Fedora 45 : singularity-ce (2026-d32912dc74)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d32912dc74 advisory. Automatic update for singularity-ce-4.4.2-1.fc45. Changelog Wed Jun 10 2026 David Trudgian - 4.4.2-1 - Upgrade to 4.4.2 upstream version. - Fix...

CVE-2026-47737 vulnerabilities

Vulnerabilities for packages: logstash-fips, gitlab-cng, gitlab-rails-ce, gitlab-rails-ce-fips, logstash...

CVE-2026-47736 vulnerabilities

Vulnerabilities for packages: logstash-fips, gitlab-cng, gitlab-rails-ce, gitlab-rails-ce-fips, logstash...

AZL-89664 CVE-2026-46303 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rockcontinue reads rs-contextent verbatim from the Rock Ridge CE record and passes it to sbbread without checking that the block number is within the mounted I...