GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, crossplane-provider-aws-dynamodb, crossplane-provider-aws-cloudfront, dask-gateway, datadog-agent, cloud-sql-proxy, loki, libnvidia-container, amazon-cloudwatch-agent-operator, fuse-overlayfs-snapshotter, kubernetes-csi-external-provisioner,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, crossplane-provider-aws-dynamodb, crossplane-provider-aws-cloudfront, dask-gateway, datadog-agent, cloud-sql-proxy, loki, libnvidia-container, amazon-cloudwatch-agent-operator, fuse-overlayfs-snapshotter, kubernetes-csi-external-provisioner,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: kubelet-csr-approver, nats, nri-mysql, nova, kor, libnvidia-container, fuse-overlayfs-snapshotter, aws-nuke, helm-docs, opencost, crossplane-provider-aws-eks, external-secrets-operator, external-dns, apache-exporter, terraform-provider-azapi, falcoctl, aws-sigv4-prox...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kubelet-csr-approver, nats, nri-mysql, nova, kor, libnvidia-container, fuse-overlayfs-snapshotter, aws-nuke, helm-docs, opencost, crossplane-provider-aws-eks, external-secrets-operator, external-dns, apache-exporter, terraform-provider-azapi, falcoctl, aws-sigv4-prox...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: kubelet-csr-approver, nats, nri-mysql, nova, kor, libnvidia-container, fuse-overlayfs-snapshotter, aws-nuke, helm-docs, opencost, crossplane-provider-aws-eks, external-secrets-operator, external-dns, apache-exporter, terraform-provider-azapi, falcoctl, aws-sigv4-prox...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, terragrunt-fips, grafana-mimir, actions-runner-controller-fips, newrelic-fluent-bit-output, conjur-cli, db-operator-fips, wavefront-collector-for-kubernetes, hubble-fips, jobset-fips, kapp-controller-fips, kubescape-server,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: terragrunt-fips, grafana-mimir, newrelic-fluent-bit-output, db-operator-fips, hubble-fips, jobset-fips, kapp-controller-fips, kubescape-server, terraform-provider-kubernetes-fips, crossplane-provider-aws-memorydb, octo-sts, json-exporter-fips, k8ssandra-operator-fips...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: pvc-autoresizer-fips, terragrunt-fips, grafana-mimir, actions-runner-controller-fips, newrelic-fluent-bit-output, conjur-cli, db-operator-fips, wavefront-collector-for-kubernetes, hubble-fips, jobset-fips, kapp-controller-fips, kubescape-server,...

Linux Distros Unpatched Vulnerability : CVE-2025-14511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowe...

GitLab 14.4 < 18.7.5 / 18.8 < 18.8.5 / 18.9 < 18.9.1 (CVE-2026-1662)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause Denia...

GitLab 16.2 < 18.7.5 / 18.8 < 18.8.5 / 18.9 < 18.9.1 (CVE-2026-0752)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that under certain circumstances, could have allowed an...

GitLab 17.11 < 18.7.5 / 18.8 < 18.8.5 / 18.9 < 18.9.1 (CVE-2026-1747)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-rol...

Linux Distros Unpatched Vulnerability : CVE-2026-1747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain...

Use of Client-Side Authentication

Overview Affected versions of this package are vulnerable to Use of Client-Side Authentication in the VCS oauth. An attacker can gain unauthorized access by exploiting weaknesses in the GitLab login mechanism or by deriving a JWT authentication token without requiring a server reboot. Remediation...

Bytebase vulnerable to Improper Authentication

Impact - GitLab login allows login by any user. - JWT auth token can be derived as long as the server isn't rebooted. - Developers can assign issues to non-admin/DBA users...

GHSA-5R3P-6RJ5-7937 Bytebase vulnerable to Improper Authentication

Impact - GitLab login allows login by any user. - JWT auth token can be derived as long as the server isn't rebooted. - Developers can assign issues to non-admin/DBA users...

Use of Client-Side Authentication

Overview Affected versions of this package are vulnerable to Use of Client-Side Authentication in the VCS oauth. An attacker can gain unauthorized access by exploiting weaknesses in the GitLab login mechanism or by deriving a JWT authentication token without requiring a server reboot. Remediation...

BIT-GITLAB-2026-2845 Allocation of Resources Without Limits or Throttling in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an authenticated user to cause denial of service by exploiting a Bitbucket Server import endpoint via repeatedly sending large responses...

BIT-GITLAB-2026-1747 Authentication Bypass Using an Alternate Path or Channel in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packag...

BIT-GITLAB-2026-1725 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting versions from 18.9 before 18.9.1 that could have under certain conditions, allowed an unauthenticated user to cause denial of service by sending specially crafted requests to a CI jobs API endpoint...