GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb-fips, crossplane-provider-aws-cloudtrail, crossplane-provider-azure-storage, pulumi-kubernetes-operator, crossplane-provider-aws-redshiftserverless-fips, crossplane-provider-aws-s3, crossplane-aws-provider, redpanda-console, ko-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb-fips, crossplane-provider-aws-cloudtrail, crossplane-provider-azure-storage, pulumi-kubernetes-operator, crossplane-provider-aws-redshiftserverless-fips, crossplane-provider-aws-s3, crossplane-aws-provider, redpanda-console, ko-fips,...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

CLEANSTART-2026-XN20660 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CH77232 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: kots, sops, ingress-nginx-controller, prometheus-operator, bom, mc, net-kourier, litestream, x509-certificate-exporter, spicedb, rancher-helm, spiffe-helper, pulumi, crossplane-provider-aws-eks, gitlab-runner, dataplaneapi, cass-operator, pulumi-language-yaml,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kots, sops, ingress-nginx-controller, prometheus-operator, bom, mc, net-kourier, litestream, x509-certificate-exporter, spicedb, rancher-helm, spiffe-helper, pulumi, crossplane-provider-aws-eks, gitlab-runner, dataplaneapi, cass-operator, pulumi-language-yaml,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kots, sops, wave, rancher-helm, pulumi, nri-mongodb, cloudprober, otel-cli, mattermost, kubernetes-dashboard, pguser, node-problem-detector, nri-postgresql, cluster-api-aws-controller, nri-kubernetes, spegel, actions-runner-controller, kubernetes-event-exporter,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: kots, sops, wave, rancher-helm, pulumi, nri-mongodb, cloudprober, otel-cli, mattermost, kubernetes-dashboard, pguser, node-problem-detector, nri-postgresql, cluster-api-aws-controller, nri-kubernetes, spegel, actions-runner-controller, kubernetes-event-exporter,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: kots, sops, wave, rancher-helm, pulumi, nri-mongodb, cloudprober, otel-cli, mattermost, kubernetes-dashboard, pguser, node-problem-detector, nri-postgresql, cluster-api-aws-controller, nri-kubernetes, spegel, actions-runner-controller, kubernetes-event-exporter,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, cerbos-fips, ingress-nginx-controller-fips, pulumi-kubernetes-operator, cert-manager-google-cas-issuer-fips, terraform-provider-random, kyverno-policy-reporter-ui, crossplane-provider-aws-s3, apache-exporter,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, cerbos-fips, ingress-nginx-controller-fips, pulumi-kubernetes-operator, cert-manager-google-cas-issuer-fips, dynamic-localpv-provisioner-fips, terraform-provider-random, kubelet-csr-approver, kyverno-policy-reporter-ui,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, cerbos-fips, ingress-nginx-controller-fips, pulumi-kubernetes-operator, cert-manager-google-cas-issuer-fips, dynamic-localpv-provisioner-fips, terraform-provider-random, kubelet-csr-approver, kyverno-policy-reporter-ui,...