CVE-2026-5954

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks...

cve-2025-54313

cve-2025-54313 Checks projects for compromised packages, suspicious files, and import statements, see is Supply Chain attack How? Just execute the script in the terminal/console. Consider to install maple first. npm install -g maple chmod +x cve-2025-54313.sh ./cve-2025-54313.sh License GNU GENER...

CVE-2026-5954

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks...

CVE-2026-5954 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks...

EUVD-2026-98230

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks...

CVE-2026-5954

GitLab CE/EE versions from 15.1 before 19.2.8 , 19.3 before 19.3.5 , and 19.4 before 19.4.2 are vulnerable to an improper authorization check . Under certain conditions, this flaw could allow a user to download package files from a public project. The issue has been remediated in the versions spe...

CVE-2026-5954 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks...

EUVD-2026-98224

GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw repository files, causing targeted users' CI/CD pipelines to execute special...

CVE-2026-101168 Insertion of Sensitive Information into Log File in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with access to GitLab Pages log data to obtain access tokens and other secrets, due to...

CVE-2026-101168 Insertion of Sensitive Information into Log File in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with access to GitLab Pages log data to obtain access tokens and other secrets, due to...

CVE-2026-101168

GitLab CE/EE versions 12.0 before 19.2.8 , 19.3 before 19.3.5 , and 19.4 before 19.4.2 are affected by a Sensitive Information Exposure vulnerability. Under certain conditions, an authenticated user with access to GitLab Pages log data could obtain access tokens and other secrets. This is caused ...

EUVD-2026-98090

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files...

EUVD-2026-98076

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to write arbitrary files on the system...

EUVD-2026-98091

A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been published and may be used...

PT-2026-111570

Name of the Vulnerable Software and Affected Versions Wazuh versions 4.1.1 through 4.14.7 Description A path traversal issue exists in the upload list file, upload rule file, and upload decoder file functions. Attackers possessing the cluster key can send DistributedAPI requests containing ../...

CVE-2026-102672: Time-of-check Time-of-use (TOCTOU) Race Condition

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.5, and 42.0.0-beta.2, Electron applications on macOS that use Squirrel.Mac-based automatic updates are vulnerable to a local race in the privileged ShipIt helper. The...

CVE-2026-101168: Insertion of Sensitive Information into Log File

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with access to GitLab Pages log data to obtain access tokens and other secrets, due to...

Microsoft Windows: CVE-2026-83509: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83510: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88106: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...