CVE-2025-61916

Spinnaker is an open source, multi-cloud continuous delivery platform. Versions prior to 2025.1.6, 2025.2.3, and 2025.3.0 are vulnerable to server-side request forgery. The primary impact is allowing users to fetch data from a remote URL. This data can be then injected into spinnaker pipelines vi...

CVE-2025-1908

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

CVE-2025-1763

An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

CVE-2024-2878

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible for an attacker to cause a denial of service by crafting unusual search terms for branch names...

CVE-2024-2279

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 to 16.8.6 all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. Using the autocomplete for issues references feature a crafted payload may lead to a stored XSS, allowin...

CVE-2025-2937 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-QFPG-MW2P-44HG vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-H6QJ-3XRQ-VXH8 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-WXX2-2CV7-VHX6 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-CXXF-6583-J227 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2025-7734 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2025-6186 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2025-1477 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-VP64-6MXR-66QC vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2025-2614 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-4VC6-9M66-J82C vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2024-12303 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2025-59830 vulnerabilities

Vulnerabilities for packages: ruby3.4-rack, ruby3.3-rack, ruby4.0-rack, ruby3.2-rack, gitlab-rails-ce...

GHSA-625H-95R8-8XPM vulnerabilities

Vulnerabilities for packages: ruby3.4-rack, ruby3.3-rack, ruby4.0-rack, ruby3.2-rack, gitlab-rails-ce...

PT-2026-1714

Name of the Vulnerable Software and Affected Versions GitLab EE versions 18.4 through 18.5.4 GitLab EE versions 18.6 through 18.6.2 GitLab EE versions 18.7 through 18.7.0 Description An authenticated user could potentially access and utilize AI model settings from unauthorized namespaces. This...