CVE-2026-6267 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-35PC-QWV6-4858 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce...

GHSA-45H8-QRQH-XR5V vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce...

GHSA-86R3-Q889-HVG2 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce...

GHSA-G9G2-QC64-JGCJ vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce...

GHSA-6FHJ-CGMM-XFX6 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce...

CVE-2026-3093 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce...

CVE-2026-14341 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce...

CVE-2026-6336 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce...

CVE-2025-14562 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce...

CVE-2026-6267 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce...

GHSA-94P8-87FF-W336 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce...

GHSA-2RC9-8CX9-FXPR vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce...

CVE-2026-4672 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce...

CVE-2026-14351 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce...

CVE-2026-12436 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce...

GHSA-8JC8-CVQJ-P926 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce...

Gitlab CE/EE 10.5 - Server-Side Request Forgery

GitLab CE/EE versions starting from 10.5 are susceptible to a server-side request forgery vulnerability when requests to the internal network for webhooks are enabled, even on a GitLab instance where registration is limited. The same vulnerability actually spans multiple CVEs, due to similar...

GitLab CI Lint API - Server-Side Request Forgery

GitLab 10.5 and later contain a server-side request forgery caused by insecure handling of webhook requests, letting unauthenticated attackers exploit the server for arbitrary requests, exploit requires sending crafted webhook requests. id: CVE-2021-22175 info: name: GitLab CI Lint API -...

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...