CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

CLEANSTART-2026-CH77232 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: rancher-system-upgrade-controller, stakater-reloader, cass-operator, git-sync, azure-workload-identity-webhook, litefs, kubernetes-csi-external-resizer, kustomize, otel-cli, kserve, pgpool2exporter, wuzz, newrelic-infra-operator, kor, kafka-proxy,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: zarf, gitlab-kas, kube-rbac-proxy, runc, k8ssandra-operator, cass-operator, sftpgo-plugin-kms, kubernetes-csi-external-resizer, promxy, otel-cli, terragrunt, kserve, azure-service-operator, crossplane-provider-aws-iam, snyk-cli, restic, kafka-proxy, authservice,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: zarf, gitlab-kas, kube-rbac-proxy, runc, k8ssandra-operator, cass-operator, sftpgo-plugin-kms, kubernetes-csi-external-resizer, promxy, otel-cli, terragrunt, kserve, azure-service-operator, crossplane-provider-aws-iam, snyk-cli, restic, kafka-proxy, authservice,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: rancher-system-upgrade-controller, stakater-reloader, cass-operator, git-sync, azure-workload-identity-webhook, litefs, kubernetes-csi-external-resizer, kustomize, otel-cli, kserve, pgpool2exporter, wuzz, newrelic-infra-operator, kor, kafka-proxy,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: rancher-system-upgrade-controller, stakater-reloader, cass-operator, git-sync, azure-workload-identity-webhook, litefs, kubernetes-csi-external-resizer, kustomize, otel-cli, kserve, pgpool2exporter, wuzz, newrelic-infra-operator, kor, kafka-proxy,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: azuredisk-csi, mariadb-operator-fips, kuma, prometheus-postgres-exporter, cert-exporter, cloudprober, flux-kustomize-controller-fips, k8s-driver-manager, aws-eks-pod-identity-agent, kubernetes-csi-external-snapshotter, prometheus-blackbox-exporter-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: azuredisk-csi, mariadb-operator-fips, kuma, prometheus-postgres-exporter, cloudprober, flux-kustomize-controller-fips, prometheus-blackbox-exporter-fips, kubernetes-csi-external-snapshotter, pulumi-language-yaml, crossplane-provider-aws-efs, kubescape-operator-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: azuredisk-csi, mariadb-operator-fips, kuma, prometheus-postgres-exporter, cert-exporter, cloudprober, flux-kustomize-controller-fips, k8s-driver-manager, aws-eks-pod-identity-agent, kubernetes-csi-external-snapshotter, prometheus-blackbox-exporter-fips,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: hey, rancher-system-upgrade-controller, stakater-reloader, cass-operator, git-sync, azure-workload-identity-webhook, litefs, kubernetes-csi-external-resizer, otel-cli, kserve, gptscript, pgpool2exporter, docker-credential-gcr, wuzz, newrelic-infra-operator, kor,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: hey, rancher-system-upgrade-controller, stakater-reloader, cass-operator, git-sync, azure-workload-identity-webhook, litefs, kubernetes-csi-external-resizer, otel-cli, kserve, gptscript, pgpool2exporter, docker-credential-gcr, wuzz, newrelic-infra-operator, kor,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: hey, protoc-gen-go, rancher-system-upgrade-controller, stakater-reloader, cass-operator, git-sync, azure-workload-identity-webhook, litefs, kubernetes-csi-external-resizer, otel-cli, kserve, gptscript, pgpool2exporter, docker-credential-gcr, wuzz, wireguard-go,...