GHSA-FF6C-W6QF-7XQC vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

CVE-2026-44312 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

CVE-2026-41636 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

GHSA-R67J-R569-JRWP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2025-69690: Deserialization of Untrusted Data

Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the postrebootcommands property. NOTE: the Supplier disputes this because this installer is only available to admins and they are intentionally allowed to execut...

CVE-2025-69691: Improper Access Control

Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.execphp. NOTE: the Supplier disputes this because the API call is only available to admins and they are intentionally allowed to execute PHP code...

CVE-2026-43101

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix potential NULL dereferences in ioam6filltracedata We need to check in6devget for possible NULL value, as suggested by Yiming Qian. Also add skbdstdevrcu instead of skbdstdev, and two missing READONCE. Note that @d...

GHSA-Q2MW-FVJ9-VVCW vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, jruby, logstash-fips, ruby3.2-net-imap, ruby3.2-rails, ruby3.3-net-imap, gitlab-rails-ce, kube-logging-operator, ruby4.0-net-imap, logstash, gitlab-rails-ce-fips, ruby3.4-net-imap, kube-fluentd-operator, ruby3.3-rails, truffleruby, ruby4.0-rails...

GHSA-HM49-WCQC-G2XG vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, jruby, logstash-fips, ruby3.2-net-imap, ruby3.2-rails, ruby3.3-net-imap, gitlab-rails-ce, kube-logging-operator, ruby4.0-net-imap, logstash, gitlab-rails-ce-fips, ruby3.4-net-imap, kube-fluentd-operator, ruby3.3-rails, truffleruby, ruby4.0-rails...

CVE-2026-42245 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, jruby, logstash-fips, ruby3.2-net-imap, ruby3.2-rails, ruby3.3-net-imap, gitlab-rails-ce, kube-logging-operator, ruby4.0-net-imap, logstash, gitlab-rails-ce-fips, ruby3.4-net-imap, kube-fluentd-operator, ruby3.3-rails, truffleruby, ruby4.0-rails...

CVE-2026-42246 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, jruby, logstash-fips, ruby3.2-net-imap, ruby3.2-rails, ruby3.3-net-imap, gitlab-rails-ce, kube-logging-operator, ruby4.0-net-imap, logstash, gitlab-rails-ce-fips, ruby3.4-net-imap, kube-fluentd-operator, ruby3.3-rails, truffleruby, ruby4.0-rails...

CVE-2026-42256 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, jruby, logstash-fips, ruby3.2-net-imap, ruby3.2-rails, ruby3.3-net-imap, gitlab-rails-ce, kube-logging-operator, ruby4.0-net-imap, logstash, gitlab-rails-ce-fips, ruby3.4-net-imap, ruby3.3-rails, truffleruby, ruby4.0-rails...

CVE-2026-42257 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, jruby, logstash-fips, ruby3.2-net-imap, ruby3.2-rails, ruby3.3-net-imap, gitlab-rails-ce, kube-logging-operator, ruby4.0-net-imap, logstash, gitlab-rails-ce-fips, ruby3.4-net-imap, kube-fluentd-operator, ruby3.3-rails, truffleruby, ruby4.0-rails...

CVE-2026-42258 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, jruby, logstash-fips, ruby3.2-net-imap, ruby3.2-rails, ruby3.3-net-imap, gitlab-rails-ce, kube-logging-operator, ruby4.0-net-imap, logstash, gitlab-rails-ce-fips, ruby3.4-net-imap, kube-fluentd-operator, ruby3.3-rails, truffleruby, ruby4.0-rails...

GHSA-87PF-FPWV-P7M7 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, jruby, logstash-fips, ruby3.2-net-imap, ruby3.2-rails, ruby3.3-net-imap, gitlab-rails-ce, kube-logging-operator, ruby4.0-net-imap, logstash, gitlab-rails-ce-fips, ruby3.4-net-imap, ruby3.3-rails, truffleruby, ruby4.0-rails...

GHSA-VCGP-9326-PQCP vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, jruby, logstash-fips, ruby3.2-net-imap, ruby3.2-rails, ruby3.3-net-imap, gitlab-rails-ce, kube-logging-operator, ruby4.0-net-imap, logstash, gitlab-rails-ce-fips, ruby3.4-net-imap, kube-fluentd-operator, ruby3.3-rails, truffleruby, ruby4.0-rails...

CVE-2026-7179

A flaw was found in the WinCE Extraction Plugin of OSPG binwalk. A local attacker can exploit this vulnerability by manipulating the 'self.filename' argument in the 'readnullterminatedstring' function. This manipulation leads to a path traversal vulnerability, potentially allowing the attacker to...

EUVD-2026-25932

A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...

CVE-2026-7179

A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...

EUVD-2026-25048

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed a user to use invalidated or incorrectly scoped credentials to access Virtual Registries under certain conditions...