Gitlab -- vulnerabilities

Gitlab reports: Cross-site Scripting issue in Markdown placeholder processing impacts GitLab CE/EE Denial of Service issue in GraphQL API impacts GitLab CE/EE Denial of Service issue in repository archive endpoint impacts GitLab CE/EE Denial of Service issue in protected branches API impacts GitL...

GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Vulnerabilities exist in versions prior to GitLab CE/EE 18.7.6, 18.8.6,...

PT-2026-24706

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...

AI Bot Hackerbot-Claw Targets Microsoft, DataDog and CNCF GitHub Repos

Security firm Pillar reveals the Chaos Agent in which Hackerbot-Claw, an AI agent, used natural language to compromise major GitHub projects and hijack developer tools...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: grafana-image-renderer, thanos, gatekeeper, azure-workload-identity-webhook, percona-server-mongodb-operator, jaeger-operator-fips, kube-metrics-adapter-fips, ceph-csi-operator-fips, k9s-fips, argo-workflows, containerd, jaeger-operator, istio, knative-net-istio-fips...

CVE-2026-27896 vulnerabilities

Vulnerabilities for packages: opencost, gptscript, osv-scanner, github-mcp-server, ferretdb, datadog-agent, jaeger...

GHSA-WVJ2-96WP-FQ3F vulnerabilities

Vulnerabilities for packages: opencost, gptscript, osv-scanner, github-mcp-server, ferretdb, datadog-agent, jaeger...

CVE-2026-27896 vulnerabilities

Vulnerabilities for packages: github-mcp-server, jaeger-fips, datadog-agent, flux-operator-fips, gitlab-workhorse-ce, opencost-fips, osv-scanner, gitlab-workhorse-ce-fips, flux-operator, jaeger, opencost, gptscript, ferretdb, datadog-agent-fips...

GHSA-WVJ2-96WP-FQ3F vulnerabilities

Vulnerabilities for packages: github-mcp-server, jaeger-fips, datadog-agent, flux-operator-fips, gitlab-workhorse-ce, opencost-fips, osv-scanner, gitlab-workhorse-ce-fips, flux-operator, jaeger, opencost, gptscript, ferretdb, datadog-agent-fips...

CVE-2026-26007 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, in-toto, label-studio, kubeflow-volumes-web-app, jupyter-base-notebook, kubeflow-jupyter-web-app, request-1276, dbt-bigquery, awx, localstack, kubeflow-pipelines, pgadmin4-fips, authentik, ggshield, pgadmin4, open-webui, barman, ansible-operator-fips...

GHSA-R6PH-V2QM-Q3C2 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, in-toto, label-studio, kubeflow-volumes-web-app, jupyter-base-notebook, kubeflow-jupyter-web-app, request-1276, dbt-bigquery, awx, localstack, kubeflow-pipelines, pgadmin4-fips, authentik, ggshield, pgadmin4, open-webui, barman, ansible-operator-fips...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, bank-vaults...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, jitsucom-bulker, grafana-fips, rancher-security-scan, neuvector-sigstore-interface-fips, mattermost-fips, bank-vaults, grafana, zitadel, docker-compose-fips, boring-registry-fips, k9s-fips, tkn-fips, kyverno, beats, gitlab-cng, kyverno-fips,...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: emissary, pypy-3.10, kubeflow-katib, dask-kubernetes, mlflow, py3-setuptools, semgrep, superset, kubeflow-jupyter-web-app, pypy-3.11, open-webui, py3-cassandra-medusa, datadog-agent, airflow, kserve...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: azure-functions-python-worker, label-studio, py3-setuptools, kubeflow-jupyter-web-app, request-1276, dbt-bigquery, awx, localstack, authentik, pgadmin4, open-webui, tritonserver-backend-vllm-cuda-12.9, superset, ansible-operator-fips, ansible-operator, pypy-3.10,...

GHSA-XRWG-MQJ6-6M22 vulnerabilities

Vulnerabilities for packages: datadog-agent...

CVE-2026-22771 vulnerabilities

Vulnerabilities for packages: datadog-agent...

CVE-2026-22771 vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips, tigera-operator...

GHSA-XRWG-MQJ6-6M22 vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips, tigera-operator...

CVE-2021-22260

A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker to execute arbitrary JavaScript code on the...