GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: flux-source-controller, skaffold, external-secrets-operator, crossplane-provider-aws-eks, crossplane-provider-aws-ecs, prometheus, argo-events, crossplane-provider-azure-synapse, terraform-provider-azurerm-fips, calico-fips, crossplane-provider-aws-emr, crossplane,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: flux-source-controller, skaffold, external-secrets-operator, crossplane-provider-aws-eks, crossplane-provider-aws-ecs, prometheus, argo-events, crossplane-provider-azure-synapse, terraform-provider-azurerm-fips, calico-fips, crossplane-provider-aws-emr, crossplane,...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

CLEANSTART-2026-XN20660 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CH77232 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, spiffe-helper, bank-vaults, kubelet-csr-approver, wuzz, renovate, gitlab-kas, ksops, aws-flb-kinesis, rancher-webhook, ctop, local-path-provisioner, pgpool2exporter, logstash-exporter, victoriametrics, pulumi-language-yaml,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-kms, crossplane-provider-aws-kinesis, spiffe-helper, tempo, bank-vaults, grafana-pyroscope, migrate, containerd, tfsec, kubernetes-csi-driver-nfs, docker-compose, sqlexporter, coredns, volume-modifier-for-k8s, terraform-provider-grafana, contour,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-kms, crossplane-provider-aws-kinesis, spiffe-helper, tempo, bank-vaults, grafana-pyroscope, migrate, containerd, tfsec, kubernetes-csi-driver-nfs, docker-compose, sqlexporter, coredns, volume-modifier-for-k8s, terraform-provider-grafana, contour,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, spiffe-helper, bank-vaults, kubelet-csr-approver, wuzz, gitlab-kas, ksops, aws-flb-kinesis, rancher-webhook, ctop, local-path-provisioner, pgpool2exporter, logstash-exporter, victoriametrics, pulumi-language-yaml, thanos-operator,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, spiffe-helper, bank-vaults, kubelet-csr-approver, wuzz, gitlab-kas, ksops, aws-flb-kinesis, rancher-webhook, ctop, local-path-provisioner, pgpool2exporter, logstash-exporter, victoriametrics, pulumi-language-yaml, thanos-operator,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-api, flux-source-controller, newrelic-fluent-bit-output, kubebuilder, actions-runner-controller, external-secrets-operator, nri-couchbase-fips, openbao-k8s-fips, crossplane-provider-aws-eks, kafkaexporter, kube-logging-operator-custom-runner,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-api, flux-source-controller, newrelic-fluent-bit-output, kubebuilder, actions-runner-controller, external-secrets-operator, nri-couchbase-fips, openbao-k8s-fips, crossplane-provider-aws-eks, kafkaexporter, kube-logging-operator-custom-runner,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-api, flux-source-controller, newrelic-fluent-bit-output, external-secrets-operator, crossplane-provider-aws-eks, prometheus, argo-events, step-ca, terraform-provider-azurerm-fips, tempo-fips, aws-ebs-csi-driver, beats, livekit-egress, beats-fips,...