GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: calico-fips, tigera-operator, elastic-agent-fips, rancher, loki, traefik-fips, spire-server, zot, frankenphp-8.5, keda-fips, opentofu-fips, istio, gitlab-workhorse-ce-fips, knative-kafka-broker-fips, kaf, prometheus-elasticsearch-exporter, external-dns, cilium-cli,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-networkmanager, argocd-image-updater, terraform-provider-aws-fips, rancher, flux-kustomize-controller, crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-aws-efs-fips, terraform-provider-acme-fips, chainloop-cli-fips,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: calico-fips, tigera-operator, elastic-agent-fips, rancher, loki, traefik-fips, spire-server, zot, frankenphp-8.5, keda-fips, opentofu-fips, istio, gitlab-workhorse-ce-fips, knative-kafka-broker-fips, kaf, prometheus-elasticsearch-exporter, external-dns, cilium-cli,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: calico-fips, cloudbeat-fips, argocd-image-updater, tigera-operator, elastic-agent-fips, rancher, loki, traefik-fips, spire-server, docker-machine-driver-harvester, zot, osv-scanner, coder, frankenphp-8.5, coder-fips, keda-fips, opentofu-fips, istio,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: rancher-agent, prometheus-operator, flux, cloud-provider-aws, kyverno, argocd-image-updater, skaffold, chisel, external-dns, cert-manager, trivy-operator, opentelemetry-collector, telegraf, rancher, zarf, fscrypt, loki, external-secrets-operator, zot, aactl, minio,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux, kyverno, chisel, buildah, rancher, fscrypt, apko, pulumi-kubernetes-operator, zot, istio, kaf, k9s, witness, k8sgpt, argo-cd, terraform-provider-tls, crossplane-provider-family-azure, flux-image-automation-controller, gatus, mattermost, syft,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: flux, kyverno, buildah, rancher, fscrypt, apko, pulumi-kubernetes-operator, zot, istio, kaf, k9s, witness, argo-cd, flux-image-automation-controller, mattermost, syft, flux-source-controller, falco-no-driver, opentofu, go-discover, gitea, kots, cilium-cli, cilium,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: rancher-agent, prometheus-operator, flux, cloud-provider-aws, docker-cli-buildx, kyverno, external-dns, cert-manager, buildah, opentelemetry-collector, telegraf, rancher, fscrypt, loki, external-secrets-operator, zot, aactl, minio, prometheus, kaf, istio, gitlab-kas,...

Malicious code in @immobiliarelabs/backstage-plugin-gitlab-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 096fc86987f4a25a5fb6572968e0c7309d71ed3e6ab16c239427de98c7d30ae7 The package ships a binding.gyp at the package root whose contents use GYP command-expansion syntax !... inside its targets/sources fields. npm...

Malicious code in @immobiliarelabs/backstage-plugin-gitlab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00eb86df154a9532085ad285ee63cd4c4f9a95a6fe983b9930cd059dfb4cb3f5 The package ships a binding.gyp at the package root whose targets/sources fields contain GYP command-expansion syntax !... at line 6. npm implicitly...

MAL-2026-6526 Malicious code in @immobiliarelabs/backstage-plugin-gitlab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00eb86df154a9532085ad285ee63cd4c4f9a95a6fe983b9930cd059dfb4cb3f5 The package ships a binding.gyp at the package root whose targets/sources fields contain GYP command-expansion syntax !... at line 6. npm implicitly...

GO-2026-5590 uniget is Vulnerable to Command Injection in tool.Check Leading to Arbitrary Code Execution in gitlab.com/uniget-org/cli

uniget is Vulnerable to Command Injection in tool.Check Leading to Arbitrary Code Execution in gitlab.com/uniget-org/cli...

Vulnerabilities are handled in GitLab Community Edition and Enterprise Edition

GitLab Inc. has identified several vulnerabilities in GitLab Enterprise Edition EE and other versions of GitLab, particularly in releases from version 8.3 to 19.1.1, with a focus on versions around 18.11.6, 19.0.3, and 19.1.1. These vulnerabilities affect various components of GitLab, including t...

CVE-2026-12635

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:34+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260625 2026-06-25 06:00:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3qtxem2v2d 2026-06-25 12:00:27+00:00| seen|...

CVE-2026-12053

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:32+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260625 2026-06-25 06:22:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3s4lhjzn2k 2026-06-25 12:00:27+00:00| seen|...

CVE-2026-11379

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:29+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260625 2026-06-25 06:01:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3qvr4vl42z 2026-06-25 12:00:27+00:00| seen|...

CVE-2026-10712

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:27+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260625 2026-06-25 06:06:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3r7uz6sh2k 2026-06-25 12:00:27+00:00| seen|...

CVE-2026-10086

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:25+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260625 2026-06-25 06:40:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3t4vjfxq2q 2026-06-25 12:00:27+00:00| seen|...

CVE-2026-8330

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:22+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260625 2026-06-25 06:02:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3qywhfd32u 2026-06-25 12:00:27+00:00| seen|...

CVE-2026-5952

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:20+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260625 2026-06-25 06:11:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3rhugxdv2z 2026-06-25 12:00:27+00:00| seen|...