GHSA-F5R5-77WF-XX6H vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

GHSA-RMHM-CWGP-268P vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

GHSA-94XW-8RG2-4FMC vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

GHSA-G797-R4R7-WP94 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: kubebuilder, mongo-tools, prometheus-mysqld-exporter, kpt, ytt, azure-aad-pod-identity-mic, metrics-server-fips, dive, cert-exporter-fips, nri-discovery-kubernetes, prometheus-adapter, nri-nginx, prometheus-beat-exporter-fips, sbomqs, smarter-device-manager,...

CVE-2020-13347

A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the runner is configured on a Windows system with a docker executor, which allows the attacker to run arbitrary commands on Windows host, via DOCKERAUTHCONFIG build variable...

CVE-2024-8237 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

CVE-2024-8177 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

CVE-2024-8114 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

CVE-2024-11669 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

CVE-2024-11828 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

CVE-2024-11668 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, airflow, velero, wal-g, fluent-bit-plugin-loki, hugo, sigstore-scaffolding, argo-events, rclone, trino, opentelemetry-collector-contrib, step, thanos, grafana-agent-operator, sops, sqlpad, hugo-extended, fulcio, tkn, zot,...

UBUNTU-CVE-2024-2874

An issue has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17.0.1. A runner registered with a crafted description has the potential to disrupt the loading of targeted GitLab web resources...

GitLab 1.0 < 13.1.3 / 13.2 < 13.2.3 / 13.3 < 13.3.1 (CVE-2020-13310)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1. It was possible to make the gitlab-runner process crash by sending malformed queries, resulting in a denial o...

BIT-GITLAB-2020-13347

A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the runner is configured on a Windows system with a docker executor, which allows the attacker to run arbitrary commands on Windows host, via DOCKERAUTHCONFIG build variable...

BIT-GITLAB-2021-39939

An uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions starting from 13.7 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker triggering a job with a specially crafted docker image to...

BIT-GITLAB-2022-4201

A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local addresses when configuring a malicious GitLab Runner...

BIT-GITLAB-RUNNER-2020-13327

An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0 before 13.3.7, all versions starting from 13.2.0 before 13.2.10. Insecure Runner Configuration in Kubernetes Environments...

BIT-GITLAB-RUNNER-2022-2251

Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a user who creates a branch with a specially crafted name and gets another user to trigger a pipeline to execute commands in the runner as that othe...