CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

CLEANSTART-2026-CH77232 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, cluster-api-gcp-controller, x509-certificate-exporter, kyverno-policy-reporter, cilium, cloud-sql-proxy, falcoctl, terraform-provider-sendgrid, tetragon, k8s-device-plugin, redka, cluster-api-aws-controller, spqr, azurefile-csi,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, cluster-api-gcp-controller, x509-certificate-exporter, kyverno-policy-reporter, cilium, cloud-sql-proxy, falcoctl, terraform-provider-sendgrid, tetragon, k8s-device-plugin, redka, cluster-api-aws-controller, spqr, azurefile-csi,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: mods, q, tailscale, local-static-provisioner, smokescreen, nri-discovery-kubernetes, modelmesh-runtime-adapter, renovate, external-dns, rancher-webhook, rancher-loglevel, temporal-server, tflint, tempo, nri-kubernetes, kubebuilder, flux-notification-controller,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: mods, q, tailscale, local-static-provisioner, smokescreen, nri-discovery-kubernetes, modelmesh-runtime-adapter, external-dns, rancher-webhook, rancher-loglevel, temporal-server, tflint, tempo, nri-kubernetes, kubebuilder, flux-notification-controller, mariadb-operato...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: mods, q, tailscale, local-static-provisioner, smokescreen, nri-discovery-kubernetes, modelmesh-runtime-adapter, external-dns, rancher-webhook, rancher-loglevel, temporal-server, tflint, tempo, nri-kubernetes, kubebuilder, flux-notification-controller, mariadb-operato...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: argo-cd, grpc-health-probe-fips, chart-testing-fips, pulumi-language-java, kubernetes-dashboard-web, terraform-provider-pagerduty, cert-manager-cmctl, apache-exporter, gitlab-kas-fips, nri-f5-fips, atlantis-fips, cluster-autoscaler-fips, amass, dataplaneapi-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: argo-cd, grpc-health-probe-fips, terraform-provider-pagerduty, pulumi-language-java, kubernetes-dashboard-web, cert-manager-cmctl, apache-exporter, gitlab-kas-fips, atlantis-fips, cluster-autoscaler-fips, dataplaneapi-fips, kubo, chaos-mesh-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: argo-cd, grpc-health-probe-fips, chart-testing-fips, pulumi-language-java, kubernetes-dashboard-web, terraform-provider-pagerduty, cert-manager-cmctl, apache-exporter, gitlab-kas-fips, nri-f5-fips, atlantis-fips, cluster-autoscaler-fips, amass, dataplaneapi-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: mods, q, tailscale, kyverno-notation-aws, local-static-provisioner, grafana-alloy, smokescreen, minio-operator, modelmesh-runtime-adapter, external-dns, rancher-webhook, rancher-loglevel, go-licenses, ip-masq-agent, grafana-image-renderer, tempo, buf, kubebuilder,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: mods, q, tailscale, kyverno-notation-aws, local-static-provisioner, grafana-alloy, smokescreen, minio-operator, modelmesh-runtime-adapter, external-dns, rancher-webhook, rancher-loglevel, go-licenses, ip-masq-agent, grafana-image-renderer, tempo, buf, kubebuilder,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: hello-world-golang, mods, iptables-wrappers, q, tailscale, mage, kyverno-notation-aws, local-static-provisioner, grafana-alloy, smokescreen, minio-operator, modelmesh-runtime-adapter, external-dns, rancher-webhook, rancher-loglevel, go-licenses, ip-masq-agent,...