26824 matches found
GitLab Reverse DNS Unauthorized Access
The vulnerability of the software interface of the CI/CD subsystem of the Git-based software platform for collaborative code development on GitLab EE/CE is related to the dependence of critical operations on the reverse DNS solution. Exploiting this vulnerability can allow a malicious actor to ga...
Maven Package Registry Bypass
The vulnerability of the Maven package registry on the Git-based software development platform, used for collaborative code development on GitLab EE/CE, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass existing securit...
GitLab Web Page Structure Code Execution
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
GitLab Authentication Bypass Info Disclosure
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Duo Workflows Unauthorized Access
The vulnerability of the Duo Workflows software tool, a git-based programming platform for collaborative code development in GitLab EE/CE, is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...
GitLab Code Generation Data Compromise
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to improper code generation management. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...
Insertion of Sensitive Information Into Sent Data
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the HttpExecutor.prepareRedirectUrlOptions process. An attacker can obtain sensitive credentials, such as GitLab's PRIVATE-TOKEN or mixed-case Authorization headers, by leveraging a...
CVE-2026-54673 electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
electron-updater allows for automatic updates for Electron apps. Prior to 9.7.0, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization", exposing credentials. Other credential-bearing headers —...
CVE-2026-54673 electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
electron-updater allows for automatic updates for Electron apps. Prior to 9.7.0, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization", exposing credentials. Other credential-bearing headers —...
CVE-2026-6552 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-8589 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-9204 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-C4M8-PV9J-V7MM vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-HM74-P2XF-RQGC vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-R82J-G6Q9-MVX8 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-6277 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-6976 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-7250 vulnerabilities
Vulnerabilities for packages: gitlab-runner...