21982 matches found
GHSA-H5PW-H3J7-CJ7F vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-PGGX-2V9R-J6GM vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-7492 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-M49F-RVV4-R4RV vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-13320 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2025-12506 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GitLab - Account Takeover via Password Reset
An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to a...
Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on any self-managed 18.11.3 server that has not taken the update. Any authenticated user who can push to a project can run it...
electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
Summary In electron-builder's builder-util-runtime package, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization". Other credential-bearing headers — most notably PRIVATE-TOKEN used by GitLab's...
GHSA-P2F4-R6V6-J797 electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
Summary In electron-builder's builder-util-runtime package, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization". Other credential-bearing headers — most notably PRIVATE-TOKEN used by GitLab's...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, prism, opensearch-dashboards, npm, kubeflow-centraldashboard, wazuh-dashboard, pulumi, gitlab-rails-ce-fips, opensearch-dashboards-fips, sqlpad, code-server, wazuh-dashboard-fips, lerna, actions-runner, kibana, homepage, saf, graalvm...
GHSA-W8WR-V893-VJVP vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, prism, opensearch-dashboards, npm, kubeflow-centraldashboard, wazuh-dashboard, pulumi, gitlab-rails-ce-fips, opensearch-dashboards-fips, sqlpad, code-server, wazuh-dashboard-fips, lerna, actions-runner, kibana, homepage, saf, graalvm...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, prism, opensearch-dashboards, npm, kubeflow-centraldashboard, wazuh-dashboard, pulumi, gitlab-rails-ce-fips, opensearch-dashboards-fips, sqlpad, code-server, wazuh-dashboard-fips, lerna, actions-runner, kibana, homepage, saf, graalvm...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, prism, opensearch-dashboards, npm, kubeflow-centraldashboard, wazuh-dashboard, pulumi, gitlab-rails-ce-fips, opensearch-dashboards-fips, sqlpad, code-server, wazuh-dashboard-fips, lerna, actions-runner, kibana, saf, graalvm...
CVE-2026-54466 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, arangodb...
GHSA-MP7J-QC5W-4988 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, arangodb...
CVE-2026-54490 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, arangodb...
GHSA-XV26-6W52-CPH6 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, arangodb...