CVE-2026-42195 Unvalidated gitlab URL parameter redirects OAuth authorize step to attacker-controlled host

draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.9, the draw.io client accepts a ?gitlab= URL parameter that overrides the GitLab server URL used during OAuth sign-in. A crafted link causes the user's click on draw.io's "Authorize in GitLab" dialog to ope...

CVE-2026-42195 Unvalidated gitlab URL parameter redirects OAuth authorize step to attacker-controlled host

draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.9, the draw.io client accepts a ?gitlab= URL parameter that overrides the GitLab server URL used during OAuth sign-in. A crafted link causes the user's click on draw.io's "Authorize in GitLab" dialog to ope...

CVE-2026-42195

draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.9, the draw.io client accepts a ?gitlab= URL parameter that overrides the GitLab server URL used during OAuth sign-in. A crafted link causes the user's click on draw.io's "Authorize in GitLab" dialog to ope...

EUVD-2026-28833

draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.9, the draw.io client accepts a ?gitlab= URL parameter that overrides the GitLab server URL used during OAuth sign-in. A crafted link causes the user's click on draw.io's "Authorize in GitLab" dialog to ope...

CVE-2026-42195

The CVE describes a vulnerability in the draw.io client prior to version 29.7.9 where a ?gitlab= URL parameter can override the GitLab server URL used during OAuth sign-in. A crafted link can force the user’s click on the "Authorize in GitLab" dialog to open a popup on an attacker-controlled host...

GHSA-FF6C-W6QF-7XQC vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

GHSA-V2FC-QM4H-8HQV vulnerabilities

Vulnerabilities for packages: pact-broker-docker-fips, ruby3.2-rails, ruby4.0-rails, ruby3.3-rails, gitlab-rails-ce-fips, kube-logging-operator, gitlab-rails-ce, ruby3.4-rails, pact-broker-docker...

GHSA-C4RQ-3M3G-8WGX vulnerabilities

Vulnerabilities for packages: pact-broker-docker-fips, ruby3.2-rails, ruby4.0-rails, ruby3.3-rails, gitlab-rails-ce-fips, kube-logging-operator, gitlab-rails-ce, ruby3.4-rails, pact-broker-docker...

CVE-2026-44312 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

GHSA-R67J-R569-JRWP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2026-41636 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

draw.io 信息泄露漏洞

Draw.IO is an open-source configurable chart drawing and whiteboard application. Versions of Draw.IO prior to 29.7.9 had a vulnerability related to information leakage. This vulnerability occurred due to the URL parameter “gitlab” overriding the GitLab server URL used during OAuth login. As a...

PT-2026-39197

Name of the Vulnerable Software and Affected Versions draw.io versions prior to 29.7.9 Description The application accepts a gitlab URL parameter that overrides the GitLab server URL used during OAuth sign-in. An attacker can use a crafted link to cause the "Authorize in GitLab" dialog to open a...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: step, certificate-transparency-fips, spicedb, migrate, commercial-expanso-edge, sftpgo, rke2-runtime, step-fips, kuma, amass, sqlexporter-fips, bento, ory-kratos-fips, vault, openfga-fips, step-ca-fips, timescaledb-parallel-copy, kube-bench-fips, flyte, pgwatch, src,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, flux-image-automation-controller, skaffold, flux-source-controller-fips, kubescape-server, src-fingerprint-fips, trivy, guac, kubevela, nemo, amazon-ssm-agent, rancher-fleet-fips, chainloop-cli, gitsign, google-osconfig-agent, packer, grafana-alloy,...

GHSA-Q2MW-FVJ9-VVCW vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby4.0-net-imap, ruby3.4-net-imap, truffleruby, ruby3.2-rails, ruby4.0-rails, ruby3.3-rails, jruby, gitlab-rails-ce-fips, kube-logging-operator, gitlab-rails-ce, ruby3.3-net-imap, ruby3.2-net-imap, ruby3.4-rails, kube-fluentd-operator, logstash...

GHSA-HM49-WCQC-G2XG vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby4.0-net-imap, ruby3.4-net-imap, truffleruby, ruby3.2-rails, ruby4.0-rails, ruby3.3-rails, jruby, gitlab-rails-ce-fips, kube-logging-operator, gitlab-rails-ce, ruby3.3-net-imap, ruby3.2-net-imap, ruby3.4-rails, kube-fluentd-operator, logstash...

CVE-2026-42256 vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby4.0-net-imap, ruby3.4-net-imap, truffleruby, ruby3.2-rails, ruby4.0-rails, ruby3.3-rails, jruby, gitlab-rails-ce-fips, kube-logging-operator, gitlab-rails-ce, ruby3.3-net-imap, ruby3.2-net-imap, ruby3.4-rails, logstash...

CVE-2026-42246 vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby4.0-net-imap, ruby3.4-net-imap, truffleruby, ruby3.2-rails, ruby4.0-rails, ruby3.3-rails, jruby, gitlab-rails-ce-fips, kube-logging-operator, gitlab-rails-ce, ruby3.3-net-imap, ruby3.2-net-imap, ruby3.4-rails, kube-fluentd-operator, logstash...

CVE-2026-42245 vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby4.0-net-imap, ruby3.4-net-imap, truffleruby, ruby3.2-rails, ruby4.0-rails, ruby3.3-rails, jruby, gitlab-rails-ce-fips, kube-logging-operator, gitlab-rails-ce, ruby3.3-net-imap, ruby3.2-net-imap, ruby3.4-rails, kube-fluentd-operator, logstash...