482 matches found
CVE-2025-12697
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...
CVE-2025-12697 Improper Encoding or Escaping of Output in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...
CVE-2025-12697 Improper Encoding or Escaping of Output in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...
CVE-2025-12697
GitLab CE/EE was affected by CVE-2025-12697. The issue could allow an authenticated user with maintainer permissions to reveal Datadog API credentials under certain conditions. Remediation has been applied in GitLab releases: 18.7.6 (for 15.5–18.7.x), 18.8.6, and 18.9.2, which address the vulnera...
Gitlab -- vulnerabilities
Gitlab reports: Cross-site Scripting issue in Markdown placeholder processing impacts GitLab CE/EE Denial of Service issue in GraphQL API impacts GitLab CE/EE Denial of Service issue in repository archive endpoint impacts GitLab CE/EE Denial of Service issue in protected branches API impacts GitL...
GitLab 安全漏洞
GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Vulnerabilities exist in versions prior to GitLab CE/EE 18.7.6, 18.8.6,...
PT-2026-24706
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...
AI Bot Hackerbot-Claw Targets Microsoft, DataDog and CNCF GitHub Repos
Security firm Pillar reveals the Chaos Agent in which Hackerbot-Claw, an AI agent, used natural language to compromise major GitHub projects and hijack developer tools...
GHSA-9H8M-3FM2-QJRQ vulnerabilities
Vulnerabilities for packages: cloud-provider-azure-fips, velero-plugin-for-gcp, cloud-provider-aws-fips, keda-fips, ops-agent, livekit-server, trivy-operator-fips, sops-fips, cass-operator-fips, ferretdb, cerbos, opentofu, metrics-server, gitlab-runner-fips, cert-manager-webhook-pdns-fips,...
CVE-2026-27896 vulnerabilities
Vulnerabilities for packages: ferretdb, datadog-agent, jaeger, gptscript, osv-scanner, opencost, github-mcp-server...
GHSA-WVJ2-96WP-FQ3F vulnerabilities
Vulnerabilities for packages: ferretdb, datadog-agent, jaeger, gptscript, osv-scanner, opencost, github-mcp-server...
CVE-2026-27896 vulnerabilities
Vulnerabilities for packages: datadog-agent, ferretdb, osv-scanner, gptscript, opencost, opencost-fips, gitlab-workhorse-ce, jaeger, gitlab-workhorse-ce-fips, jaeger-fips, github-mcp-server, flux-operator, flux-operator-fips, datadog-agent-fips...
GHSA-WVJ2-96WP-FQ3F vulnerabilities
Vulnerabilities for packages: datadog-agent, ferretdb, osv-scanner, gptscript, opencost, opencost-fips, gitlab-workhorse-ce, jaeger, gitlab-workhorse-ce-fips, jaeger-fips, github-mcp-server, flux-operator, flux-operator-fips, datadog-agent-fips...
CVE-2026-26007 vulnerabilities
Vulnerabilities for packages: litellm, gitlab-cng, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, prefect, in-toto, semgrep, gitlab-cng-fips, datadog-agent-fips, airflow-core, kserve, mitmproxy, opal, ansible-operator-fips, metaflow-service, localstack, ggshield,...
GHSA-R6PH-V2QM-Q3C2 vulnerabilities
Vulnerabilities for packages: litellm, gitlab-cng, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, prefect, in-toto, semgrep, gitlab-cng-fips, datadog-agent-fips, airflow-core, kserve, mitmproxy, opal, ansible-operator-fips, metaflow-service, localstack, ggshield,...
CVE-2025-11065 vulnerabilities
Vulnerabilities for packages: jitsucom-bulker, bank-vaults...
CVE-2025-11065 vulnerabilities
Vulnerabilities for packages: gitlab-cng, bank-vaults, grafana, istio-fips, docker-compose-fips, gitlab-cng-fips, zitadel, k9s-fips, jitsucom-bulker, kyverno-fips, pluto-fips, mattermost-fips, neuvector-sigstore-interface-fips, boring-registry-fips, ratify-fips, rancher-security-scan,...
CVE-2026-23949 vulnerabilities
Vulnerabilities for packages: airflow, datadog-agent, py3-setuptools, semgrep, kubeflow-katib, kserve, open-webui, py3-cassandra-medusa, superset, pypy-3.11, pypy-3.10, dask-kubernetes, emissary, kubeflow-jupyter-web-app, mlflow...
CVE-2026-23949 vulnerabilities
Vulnerabilities for packages: azure-functions-python-worker, tensorflow-gpu-jupyter, duplicity, authentik-fips, ansible-operator, semgrep, datadog-agent-fips, emissary, spamcheck, kserve, opal, ansible-operator-fips, localstack, pypy-3.10, datadog-agent, mlflow, text-generation-inference,...