103 matches found
cve-2026-85706
CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read CVSS 10.0 · Unauthenticated · Actively exploited CISA KEV A parser differential between GitLab Workhorse Go reverse proxy and Puma/Grape Ruby lets an unauthenticated attacker bypass Workhorse's accelerated-upload handoff and reach three...
CVE-2026-56857 vulnerabilities
Vulnerabilities for packages: falco-no-driver, ingress-nginx-controller-fips, cert-manager, consul-k8s-fips, google-osconfig-agent, spire-server, karpenter, tempo-fips, frankenphp-8.4, commercial-spilo-fips, prometheus, aactl, commercial-chainloop-cli, containerd, loki, kube-conformance,...
GHSA-WR3R-JHMC-F6JW vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-runner-fips...
CVE-2026-92530 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-runner-fips...
CVE-2026-92874 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-runner-fips...
CVE-2026-92628 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-runner-fips...
GHSA-C3RM-3HQR-4QWM vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-runner-fips...
GO-2026-5031 vulnerabilities
Vulnerabilities for packages: mattermost-fips, seaweedfs-operator-fips, seaweedfs-fips, seaweedfs, seaweedfs-operator, seaweedfs-rocksdb-fips, seaweedfs-rocksdb, gitlab-workhorse-ce...
GO-2026-5032 vulnerabilities
Vulnerabilities for packages: mattermost-fips, seaweedfs-operator-fips, seaweedfs-fips, seaweedfs, seaweedfs-operator, seaweedfs-rocksdb-fips, seaweedfs-rocksdb, gitlab-workhorse-ce...
GO-2026-5066 vulnerabilities
Vulnerabilities for packages: mattermost-fips, seaweedfs-operator-fips, rclone-fips, seaweedfs-fips, seaweedfs, mattermost, seaweedfs-operator, hugo, rclone, gitlab-workhorse-ce, listmonk...
GO-2026-5062 vulnerabilities
Vulnerabilities for packages: mattermost-fips, mailpit, seaweedfs-operator-fips, rclone-fips, seaweedfs-fips, hugo-extended, seaweedfs, filebrowser, mattermost, seaweedfs-operator, hugo, mailpit-fips, rclone, seaweedfs-rocksdb, seaweedfs-rocksdb-fips, gitlab-workhorse-ce, listmonk, hugo-fips...
GO-2026-4770 vulnerabilities
Vulnerabilities for packages: flux-operator, ferretdb, gitlab-workhorse-ce-fips, osv-scanner, datadog-agent, jaeger, opencost, opencost-fips, glab, livekit-cli, datadog-agent-fips, gitlab-workhorse-ce, jaeger-fips, flux-operator-fips...
GO-2026-4773 vulnerabilities
Vulnerabilities for packages: flux-operator, ferretdb, gitlab-workhorse-ce-fips, osv-scanner, datadog-agent, jaeger, opencost, opencost-fips, glab, livekit-cli, datadog-agent-fips, gitlab-workhorse-ce, jaeger-fips, flux-operator-fips...
GHSA-Q675-QJ96-32M9 vulnerabilities
Vulnerabilities for packages: mattermost-fips, seaweedfs-operator-fips, seaweedfs-fips, seaweedfs, seaweedfs-operator, seaweedfs-rocksdb-fips, seaweedfs-rocksdb, gitlab-workhorse-ce...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: cert-manager, vault-fips, argo-workflows-fips, kots, frankenphp-8.4, prometheus-mongodb-exporter, minio, aactl, knative-eventing-fips, vault, cloudbeat, kubescape-server, k9s-fips, istio, tigera-operator, cloudbeat-fips, flux-source-controller-fips, helm, coder,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: gpu-operator-fips, cluster-proportional-autoscaler-fips, gomplate-fips, nats-server-fips, sftpgo-plugin-eventsearch, neuvector-dbgen-fips, sonobuoy-fips, goose-fips, flux-source-controller-fips, flux-image-automation-controller, falcoctl,...
CVE-2026-1182 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-kas-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-rails-ce, gitlab-cng, gitlab-cng-fips, gitlab-kas, gitlab-runner-fips...
GHSA-P3CX-FRRM-35M8 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-kas-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-rails-ce, gitlab-cng, gitlab-cng-fips, gitlab-kas, gitlab-runner-fips...