26861 matches found
GHSA-5P55-QCQV-882W vulnerabilities
Vulnerabilities for packages: gitlab-cng-fips, gitlab-rails-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner...
GHSA-R38R-HVG8-XQHF vulnerabilities
Vulnerabilities for packages: gitlab-cng-fips, gitlab-rails-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner...
GHSA-WGQ9-QP63-G8J3 vulnerabilities
Vulnerabilities for packages: gitlab-cng-fips, gitlab-rails-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner...
CVE-2026-1402 vulnerabilities
Vulnerabilities for packages: gitlab-cng-fips, gitlab-rails-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner...
Linux Distros Unpatched Vulnerability : CVE-2026-5296
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that when foundational...
Linux Distros Unpatched Vulnerability : CVE-2026-4868
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that, under certain...
CVE-2026-10078
A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically clientid and clientsecret, to be transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This insecure transmission can lead to th...
CVE-2026-10078
A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically clientid and clientsecret, to be transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This insecure transmission can lead to th...
CVE-2026-10078
The CVE-2026-10078 entry concerns Quay config-tool’s GitLab OAuth validator. The vulnerability causes client_id and client_secret to be sent in plaintext via URL query parameters during POST requests to the GitLab endpoint, enabling potential exposure of credentials in logs (server access logs, r...
CVE-2026-10078 Quay/config-tool: quay/config-tool: gitlab oauth client_secret exposed in url querystring
A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically clientid and clientsecret, to be transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This insecure transmission can lead to th...
CVE-2026-10078 Quay/config-tool: quay/config-tool: gitlab oauth client_secret exposed in url querystring
A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically clientid and clientsecret, to be transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This insecure transmission can lead to th...
CVE-2026-10078
A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically clientid and clientsecret, to be transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This insecure transmission can lead to th...
PT-2026-44797
Name of the Vulnerable Software and Affected Versions Quay config-tool affected versions not specified Description A flaw in the GitLab OAuth validator causes sensitive credentials, specifically client id and client secret, to be transmitted as plaintext in URL query parameters during POST reques...
AI Workflow Runner Authorization Compromise
The vulnerability of the authorization mechanism for performers of artificial intelligence AI workflow runners on a Git-based software platform for collaborative code development on GitLab relates to bypassing authorization by using a user-controlled key. Exploiting this vulnerability could allow...
GitLab Authentication Bypass Info Disclosure
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Duo Workflows API Interface Bypass
The vulnerability of the Duo Workflows API interface of the software platform based on git for collaborative code development in GitLab EE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security...
GitLab Resource Distribution DoS
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...
GitLab Authentication Unauthorized Access
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Linux Distros Unpatched Vulnerability : CVE-2026-9807
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain...
Linux Distros Unpatched Vulnerability : CVE-2026-8716
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain...