GHSA-P98J-92PF-MC4P vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, langfuse, gitlab-rails-ce, nextcloud-server, wazuh-dashboard-fips, gitlab-rails-ce-fips, langfuse-fips, librechat, awx, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, opensearch-dashboards, opensearch-dashboards-fips...

GitLab - Account Takeover via Password Reset

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to a...

CVE-2026-90970: Improper Neutralization of Special Elements Used in a Template Engine

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape...

PT-2026-104355

Name of the Vulnerable Software and Affected Versions GitLab AI Gateway versions 18.1.6 through 19.2.3 GitLab AI Gateway versions 19.3 through 19.3.1 GitLab AI Gateway versions 19.4 through 19.4.0 Description An improper neutralization weakness in the custom-flow prompt-template processing of the...

CVE-2026-102599 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, jupyter-base-notebook, redisinsight, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee...

GHSA-2GC4-CQFQ-P2GV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, jupyter-base-notebook, redisinsight, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee...

CLEANSTART-2025-WF62094 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3

Security vulnerability affects the gitlab-runner package. Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3...

CVE-2026-92530 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner, gitlab-runner-fips...

CVE-2026-93577 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...

GHSA-WQWG-376R-C226 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...

GHSA-WR3R-JHMC-F6JW vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner, gitlab-runner-fips...

CVE-2026-89078 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...

GHSA-9CHR-4X58-948M vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...

CVE-2026-92628 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner, gitlab-runner-fips...

GHSA-C3RM-3HQR-4QWM vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner, gitlab-runner-fips...

CVE-2026-92874 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner, gitlab-runner-fips...

GHSA-VP7F-562J-4QGR vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner, gitlab-runner-fips...

CVE-2026-89078 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-92530 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-9CHR-4X58-948M vulnerabilities

Vulnerabilities for packages: gitlab-runner...