GitLab Authentication Unauthorized Access

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

GitLab Git Command Execution

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

bentodev (>=0.1.17, <=2018.11.2), confsave (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2026-44244 via gitpython (2.1.3)

gitpython PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bentodev =0.1.17, =0.1.0, =0.9.0, =0.53.0 - reckoner 1.1.1 Source cves: CVE-2026-44244 Source advisory: OSV:GHSA-V87R-6Q3F-2J67...

dotcli (>=0.1.4, <=0.1.7), giraumon (0.0.1) +3 more potentially affected by CVE-2026-44244 via gitpython (2.1.5)

gitpython PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dotcli =0.1.4, =1.0.1, =1.0.0, =1.0.18 Source cves: CVE-2026-44244 Source advisory: OSV:GHSA-V87R-6Q3F-2J67...

bentodev (>=0.1.17, <=2018.11.2), confsave (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2026-44243 via gitpython (2.1.3)

gitpython PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bentodev =0.1.17, =0.1.0, =0.9.0, =0.53.0 - reckoner 1.1.1 Source cves: CVE-2026-44243 Source advisory: OSV:GHSA-7545-FCXQ-7J24...

dotcli (>=0.1.4, <=0.1.7), giraumon (0.0.1) +3 more potentially affected by CVE-2026-44243 via gitpython (2.1.5)

gitpython PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dotcli =0.1.4, =1.0.1, =1.0.0, =1.0.18 Source cves: CVE-2026-44243 Source advisory: OSV:GHSA-7545-FCXQ-7J24...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, sftpgo-plugin-eventsearch, caddy-fips, ldap2pg, openfga, azure-service-operator, rke2-runtime-fips, argo-workflows, cloudprober-fips, authentik-fips, argo-workflows-fips, keda-fips, spqr, envoy-gateway-fips, openfga-fips, kuma, kube-bench,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: witness, gitsign, argo-workflows, grype-fips, src-fingerprint-fips, argo-workflows-fips, grype-db, kubevela, melange, flux, flux-fips, nuclei, kubescape-server-fips, steampipe, cerbos-fips, crossplane-fips, chainctl, argo-events, packer, kots, skaffold-fips,...

CVE-2026-42256 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-logging-operator, logstash-fips, ruby3.2-net-imap, ruby3.4-rails, ruby4.0-rails, gitlab-rails-ce-fips, truffleruby, ruby3.3-rails, ruby3.4-net-imap, ruby3.3-net-imap, logstash, ruby3.2-rails, jruby, ruby4.0-net-imap...

GHSA-75XQ-5H9V-W6PX vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-logging-operator, logstash-fips, ruby3.2-net-imap, ruby3.4-rails, ruby4.0-rails, gitlab-rails-ce-fips, truffleruby, ruby3.3-rails, ruby3.4-net-imap, ruby3.3-net-imap, logstash, kube-fluentd-operator, ruby3.2-rails, jruby, ruby4.0-net-imap...

GHSA-HM49-WCQC-G2XG vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-logging-operator, logstash-fips, ruby3.2-net-imap, ruby3.4-rails, ruby4.0-rails, gitlab-rails-ce-fips, truffleruby, ruby3.3-rails, ruby3.4-net-imap, ruby3.3-net-imap, logstash, kube-fluentd-operator, ruby3.2-rails, jruby, ruby4.0-net-imap...

CVE-2026-42245 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-logging-operator, logstash-fips, ruby3.2-net-imap, ruby3.4-rails, ruby4.0-rails, gitlab-rails-ce-fips, truffleruby, ruby3.3-rails, ruby3.4-net-imap, ruby3.3-net-imap, logstash, kube-fluentd-operator, ruby3.2-rails, jruby, ruby4.0-net-imap...

CVE-2026-42246 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-logging-operator, logstash-fips, ruby3.2-net-imap, ruby3.4-rails, ruby4.0-rails, gitlab-rails-ce-fips, truffleruby, ruby3.3-rails, ruby3.4-net-imap, ruby3.3-net-imap, logstash, kube-fluentd-operator, ruby3.2-rails, jruby, ruby4.0-net-imap...

CVE-2026-42257 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-logging-operator, logstash-fips, ruby3.2-net-imap, ruby3.4-rails, ruby4.0-rails, gitlab-rails-ce-fips, truffleruby, ruby3.3-rails, ruby3.4-net-imap, ruby3.3-net-imap, logstash, kube-fluentd-operator, ruby3.2-rails, jruby, ruby4.0-net-imap...

CVE-2026-42258 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-logging-operator, logstash-fips, ruby3.2-net-imap, ruby3.4-rails, ruby4.0-rails, gitlab-rails-ce-fips, truffleruby, ruby3.3-rails, ruby3.4-net-imap, ruby3.3-net-imap, logstash, kube-fluentd-operator, ruby3.2-rails, jruby, ruby4.0-net-imap...

GHSA-87PF-FPWV-P7M7 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-logging-operator, logstash-fips, ruby3.2-net-imap, ruby3.4-rails, ruby4.0-rails, gitlab-rails-ce-fips, truffleruby, ruby3.3-rails, ruby3.4-net-imap, ruby3.3-net-imap, logstash, ruby3.2-rails, jruby, ruby4.0-net-imap...

GHSA-Q2MW-FVJ9-VVCW vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-logging-operator, logstash-fips, ruby3.2-net-imap, ruby3.4-rails, ruby4.0-rails, gitlab-rails-ce-fips, truffleruby, ruby3.3-rails, ruby3.4-net-imap, ruby3.3-net-imap, logstash, kube-fluentd-operator, ruby3.2-rails, jruby, ruby4.0-net-imap...

GHSA-VCGP-9326-PQCP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-logging-operator, logstash-fips, ruby3.2-net-imap, ruby3.4-rails, ruby4.0-rails, gitlab-rails-ce-fips, truffleruby, ruby3.3-rails, ruby3.4-net-imap, ruby3.3-net-imap, logstash, kube-fluentd-operator, ruby3.2-rails, jruby, ruby4.0-net-imap...

Linux Distros Unpatched Vulnerability : CVE-2025-13078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have...

Linux Distros Unpatched Vulnerability : CVE-2026-1660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain...