CVE-2025-12697 Improper Encoding or Escaping of Output in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...

CVE-2025-12697

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...

CVE-2025-12697 Improper Encoding or Escaping of Output in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...

CVE-2025-12697 Improper Encoding or Escaping of Output in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...

CVE-2025-12697

GitLab CE/EE was affected by CVE-2025-12697. The issue could allow an authenticated user with maintainer permissions to reveal Datadog API credentials under certain conditions. Remediation has been applied in GitLab releases: 18.7.6 (for 15.5–18.7.x), 18.8.6, and 18.9.2, which address the vulnera...

CVE-2025-12697

Removed by vendor...

CVE-2025-12697: Improper Encoding or Escaping of Output

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...

GitLab security vulnerabilities

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Vulnerabilities exist in versions prior to GitLab CE/EE 18.7.6, 18.8.6,...

PT-2026-24706

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...

Gitlab -- vulnerabilities

Gitlab reports: Cross-site Scripting issue in Markdown placeholder processing impacts GitLab CE/EE Denial of Service issue in GraphQL API impacts GitLab CE/EE Denial of Service issue in repository archive endpoint impacts GitLab CE/EE Denial of Service issue in protected branches API impacts GitL...

AI Bot Hackerbot-Claw Targets Microsoft, DataDog and CNCF GitHub Repos

Security firm Pillar reveals the Chaos Agent in which Hackerbot-Claw, an AI agent, used natural language to compromise major GitHub projects and hijack developer tools...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: skaffold, kube-arangodb-fips, k8s-agents-operator, scorecard, trufflehog-fips, prometheus-adapter, tekton-chains, k3d, fulcio-fips, calico, velero-fips, kubernetes-dns-node-cache-fips, eck-operator-fips, reports-server, ops-agent, kubescape-server-fips, vault-fips,...

CVE-2026-27896 vulnerabilities

Vulnerabilities for packages: github-mcp-server, osv-scanner, jaeger, gptscript, opencost, ferretdb...

GHSA-WVJ2-96WP-FQ3F vulnerabilities

Vulnerabilities for packages: github-mcp-server, osv-scanner, jaeger, gptscript, opencost, ferretdb...

CVE-2026-27896 vulnerabilities

Vulnerabilities for packages: jaeger, datadog-agent-fips, ferretdb, jaeger-fips, github-mcp-server, osv-scanner, flux-operator, gptscript, gitlab-workhorse-ce, opencost, opencost-fips, gitlab-workhorse-ce-fips, datadog-agent, flux-operator-fips...

GHSA-WVJ2-96WP-FQ3F vulnerabilities

Vulnerabilities for packages: jaeger, datadog-agent-fips, ferretdb, jaeger-fips, github-mcp-server, osv-scanner, flux-operator, gptscript, gitlab-workhorse-ce, opencost, opencost-fips, gitlab-workhorse-ce-fips, datadog-agent, flux-operator-fips...

GHSA-R6PH-V2QM-Q3C2 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, dbt-bigquery, datadog-agent-fips, prefect, datadog-agent, open-webui, kserve, dask-kubernetes, ggshield, request-1276, pgadmin4, pgadmin4-fips, openstack-kolla-toolbox-2025.1, airflow-core, kubeflow-pipelines-visualization-server, awx,...

CVE-2026-26007 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, dbt-bigquery, datadog-agent-fips, prefect, datadog-agent, open-webui, kserve, dask-kubernetes, ggshield, request-1276, pgadmin4, pgadmin4-fips, openstack-kolla-toolbox-2025.1, airflow-core, kubeflow-pipelines-visualization-server, awx,...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: bank-vaults, jitsucom-bulker...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: grafana, neuvector-sigstore-interface-fips, mattermost-fips, pluto-fips, beats, k9s-fips, boring-registry-fips, beats-fips, zitadel, kyverno-notation-aws-fips, tkn-fips, istio-fips, bank-vaults, jitsucom-bulker, rancher-security-scan, ratify-fips, docker-compose-fips...