GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: istio, vault-secrets-operator, helm-mapkubeapis, syncthing-fips, cert-manager-cmctl-fips, external-dns, mesosphere-vsphere-csi, opa-fips-envoy, pulumi-language-java, nsc, k9s-fips, cilium-envoy, cloud-provider-aws-fips, policy-controller, aws-flb-firehose-fips, act,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: istio, kubernetes-csi-external-health-monitor, mc-fips, vault-secrets-operator, helm-mapkubeapis, crossplane-provider-aws-memorydb-fips, cert-manager-cmctl-fips, milvus, chaos-mesh-fips, crossplane-provider-sql, external-dns, mesosphere-vsphere-csi,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: istio, vault-secrets-operator, helm-mapkubeapis, syncthing-fips, cert-manager-cmctl-fips, external-dns, mesosphere-vsphere-csi, opa-fips-envoy, pulumi-language-java, nsc, k9s-fips, cilium-envoy, cloud-provider-aws-fips, policy-controller, aws-flb-firehose-fips, act,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: istio, kubernetes-csi-external-health-monitor, mc-fips, vault-secrets-operator, helm-mapkubeapis, crossplane-provider-aws-memorydb-fips, cert-manager-cmctl-fips, milvus, chaos-mesh-fips, crossplane-provider-sql, external-dns, mesosphere-vsphere-csi,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: node-problem-detector, aws-iam-authenticator-fips, istio, kubernetes-csi-external-health-monitor, mc-fips, vault-secrets-operator, victoriametrics-operator, helm-mapkubeapis, syncthing-fips, crossplane-provider-aws-memorydb-fips, cert-manager-cmctl-fips, milvus,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: node-problem-detector, aws-iam-authenticator-fips, istio, kubernetes-csi-external-health-monitor, mc-fips, vault-secrets-operator, victoriametrics-operator, helm-mapkubeapis, syncthing-fips, crossplane-provider-aws-memorydb-fips, cert-manager-cmctl-fips, milvus,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: node-problem-detector, aws-iam-authenticator-fips, istio, kubernetes-csi-external-health-monitor, mc-fips, vault-secrets-operator, victoriametrics-operator, helm-mapkubeapis, syncthing-fips, crossplane-provider-aws-memorydb-fips, cert-manager-cmctl-fips, milvus,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: chaos-mesh-fips, mesosphere-vsphere-csi, nri-memcached, victorialogs, k9s-fips, kor, cloud-provider-aws-fips, cri-tools, dragonfly-operator-fips, stern, cerbos, kubernetes-dashboard-auth-fips, temporal-ui-server-fips, migrate,...

CVE-2026-39892 vulnerabilities

Vulnerabilities for packages: localstack, kserve, request-1276, apache-beam-python-3.13-sdk, pgadmin4-fips, datadog-agent-fips, airflow, ggshield, apache-beam-python-3.12-sdk, openstack-kolla-toolbox-2025.2, vllm-openai-cuda-12.9, semgrep, kubeflow-pipelines-visualization-server, dask-kubernetes,...

GHSA-P423-J2CM-9VMQ vulnerabilities

Vulnerabilities for packages: localstack, kserve, request-1276, apache-beam-python-3.13-sdk, pgadmin4-fips, datadog-agent-fips, airflow, ggshield, apache-beam-python-3.12-sdk, openstack-kolla-toolbox-2025.2, vllm-openai-cuda-12.9, semgrep, kubeflow-pipelines-visualization-server, dask-kubernetes,...

FreeBSD : Gitlab -- vulnerabilities (099d4998-33cc-11f1-a7d1-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 099d4998-33cc-11f1-a7d1-2cf05da270f3 advisory. Gitlab reports: Exposed Method issue in websocket connections impacts GitLab CE/EE Denial of...

EUVD-2026-20789

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an unauthenticated user to cause denial of service due to improper input validation of JSON payloads...

EUVD-2026-20793

GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports could have allowed an authenticated user to leak IP addresses of users viewing the report via specially crafted content...

EUVD-2026-20795

GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user with developer-role permissions to modify protected environment settings due to improper authorization checks in t...

EUVD-2026-20802

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user to invoke unintended server-side methods through websocket connections due to improper access control...

EUVD-2026-20791

GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user to cause denial of service to the GitLab instance due to improper input validation in GraphQL queries...

EUVD-2026-20801

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user with custom role permissions to demote or remove higher-privileged group members due to improper authorization...

EUVD-2025-209367

GitLab has remediated an issue in GitLab EE affecting all versions from 16.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstances could have allowed an authenticated user to have access to other users' email addresses via certain GraphQL queries...

EUVD-2026-20797

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user to access confidential issues assigned to other users via CSV export due to insufficient authorization checks...

EUVD-2025-209365

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an unauthenticated user to cause denial of service by sending repeated GraphQL queries...