CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

CLEANSTART-2026-XN20660 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CH77232 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: supercronic, flux-helm-controller, secrets-store-csi-driver-provider-azure, timoni, grafana-operator, docker-compose, rabbitmq-cluster-operator, boring-registry, nats, lvm-driver, delve, flux-source-controller, conftest, pgtimetable, rancher-machine,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: rancher-agent, crossplane-provider-aws-cloudformation, flux-helm-controller, prometheus, secrets-store-csi-driver-provider-azure, timoni, kubernetes-dashboard-auth, spire-controller-manager, tkn, terraform-provider-time, dkron, coredns, syft, docker-compose,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: rancher-agent, crossplane-provider-aws-cloudformation, flux-helm-controller, prometheus, secrets-store-csi-driver-provider-azure, timoni, kubernetes-dashboard-auth, spire-controller-manager, tkn, terraform-provider-time, dkron, coredns, syft, docker-compose,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: supercronic, flux-helm-controller, secrets-store-csi-driver-provider-azure, timoni, grafana-operator, docker-compose, rabbitmq-cluster-operator, boring-registry, nats, lvm-driver, delve, flux-source-controller, conftest, pgtimetable, rancher-machine,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: supercronic, flux-helm-controller, secrets-store-csi-driver-provider-azure, timoni, grafana-operator, docker-compose, rabbitmq-cluster-operator, boring-registry, nats, lvm-driver, delve, flux-source-controller, conftest, pgtimetable, rancher-machine,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: migrate, dkron-fips, omnictl-multiarch, kube-arangodb-fips, knative-net-istio, pulumi-language-yaml, oauth2-proxy, blob-csi-fips, cass-operator-fips, gitlab-kas, dex, external-dns-fips, flagger-fips, teleport-operator-fips, knative-client, karpenter,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: migrate, whereabouts, rancher-security-scan-fips, dkron-fips, omnictl-multiarch, kube-arangodb-fips, knative-net-istio, pulumi-language-yaml, oauth2-proxy, blob-csi-fips, cass-operator-fips, gitlab-kas, dex, external-dns-fips, cloud-provider-aws-fips,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: migrate, whereabouts, rancher-security-scan-fips, dkron-fips, omnictl-multiarch, kube-arangodb-fips, knative-net-istio, pulumi-language-yaml, oauth2-proxy, blob-csi-fips, cass-operator-fips, gitlab-kas, dex, external-dns-fips, cloud-provider-aws-fips,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kargo, supercronic, flux-helm-controller, secrets-store-csi-driver-provider-azure, timoni, grafana-operator, k9s, docker-compose, boring-registry, gcsfuse, nats, juicefs-csi-driver, lvm-driver, delve, flux-source-controller, conftest, fulcio, velero-plugin-for-aws,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kargo, supercronic, flux-helm-controller, secrets-store-csi-driver-provider-azure, timoni, grafana-operator, k9s, docker-compose, boring-registry, gcsfuse, nats, juicefs-csi-driver, lvm-driver, delve, flux-source-controller, conftest, fulcio, velero-plugin-for-aws,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: kargo, supercronic, flux-helm-controller, secrets-store-csi-driver-provider-azure, timoni, grafana-operator, k9s, docker-compose, boring-registry, gcsfuse, nats, juicefs-csi-driver, lvm-driver, delve, flux-source-controller, conftest, fulcio, velero-plugin-for-aws,...