GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Vulnerabilities exist in versions of GitLab CE/EE before 18.7.6, 18.8.6...

GitLab 14.4 < 18.7.6 / 18.8 < 18.8.6 / 18.9 < 18.9.2 (CVE-2026-1663)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with group impor...

GitLab 跨站脚本漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It features built-in version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery capabilities. GitLab has a cross-site scripting vulnerability, which stems from improper...

PT-2026-24711

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to disclose metadata from private issues, merge requests, epics, milestones, or commits due to improper filtering...

PT-2026-24708

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to cause a denial of service condition due to improper input validation on webhook custom header names under...

PT-2026-24712

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service by sending specially crafted GraphQL requests due to uncontrolled recursion under certain circumstances...

GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD continuous integration and delivery. Vulnerabilities exist in versions of GitLab CE/EE before 18.7.6, 18.8.6...

GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. There were security vulnerabilities in versions of GitLab CE and EE...

GitLab Enterprise Edition（EE）和GitLab Community Edition（CE） 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. There were security vulnerabilities in versions prior to 18.7.6,...

GitLab 18.9 < 18.9.2 (CVE-2026-1069)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.9.2... CVE-2026-1069 Note that Nessus has not tested for this issue but has instead relied only on the...

GitLab 8.11 < 18.7.6 / 18.8 < 18.8.6 / 18.9 < 18.9.2 (CVE-2026-3848)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to make unintend...

FreeBSD : Gitlab -- vulnerabilities (0236eab0-1d62-11f1-88f8-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 0236eab0-1d62-11f1-88f8-2cf05da270f3 advisory. Gitlab reports: Cross-site Scripting issue in Markdown placeholder processing impacts GitLab...

PT-2026-24709

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.0 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service by issuing specially crafted requests to repository archive endpoints under certai...

GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Vulnerabilities exist in versions of GitLab CE/EE before 18.7.6, 18.8.6...

GitLab 10.6 < 18.7.6 / 18.8 < 18.8.6 / 18.9 < 18.9.2 (CVE-2026-1090)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user, when the...

CVE-2026-27138 vulnerabilities

Vulnerabilities for packages: victoriametrics, flux-operator, pgwatch, victoriametrics-fips, nova, podinfo, flux-helm-controller, flux-image-automation-controller, omnictl-multiarch, gotenberg, grafana-operator-fips, metacontroller, flux-source-watcher, polaris, flux-image-reflector-controller, g...

GHSA-PH5J-38MG-J6HP vulnerabilities

Vulnerabilities for packages: victoriametrics, flux-operator, pgwatch, victoriametrics-fips, nova, podinfo, flux-helm-controller, flux-image-automation-controller, omnictl-multiarch, gotenberg, grafana-operator-fips, metacontroller, flux-source-watcher, polaris, flux-image-reflector-controller, g...

GHSA-7HFW-R8QC-89V4 vulnerabilities

Vulnerabilities for packages: victoriametrics, flux-operator, pgwatch, victoriametrics-fips, nova, podinfo, flux-helm-controller, flux-image-automation-controller, omnictl-multiarch, gotenberg, grafana-operator-fips, metacontroller, flux-source-watcher, polaris, flux-image-reflector-controller, g...

CVE-2026-27137 vulnerabilities

Vulnerabilities for packages: victoriametrics, flux-operator, pgwatch, victoriametrics-fips, nova, podinfo, flux-helm-controller, flux-image-automation-controller, omnictl-multiarch, gotenberg, grafana-operator-fips, metacontroller, flux-source-watcher, polaris, flux-image-reflector-controller, g...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: rancher-machine, snyk-cli, loki, terraform-provider-random, kube-rbac-proxy, kube-vip-cloud-provider, cluster-api-provider-vsphere, kube-metrics-adapter, argocd-image-updater, wal-g, sftpgo-plugin-eventstore, kyverno, flux-source-controller,...