GHSA-WGQ9-QP63-G8J3 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-R38R-HVG8-XQHF vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-5P55-QCQV-882W vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-1402 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-8716 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-6713 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-R38R-HVG8-XQHF vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng, gitlab-rails-ce, gitlab-runner-fips...

GHSA-WGQ9-QP63-G8J3 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng, gitlab-rails-ce, gitlab-runner-fips...

CVE-2026-6713 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng, gitlab-rails-ce, gitlab-runner-fips...

GHSA-5P55-QCQV-882W vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng, gitlab-rails-ce, gitlab-runner-fips...

CVE-2026-8716 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng, gitlab-rails-ce, gitlab-runner-fips...

CVE-2026-1402 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng, gitlab-rails-ce, gitlab-runner-fips...

Linux Distros Unpatched Vulnerability : CVE-2026-5296

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that when foundational...

Linux Distros Unpatched Vulnerability : CVE-2026-4868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that, under certain...

CVE-2026-10078

A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically clientid and clientsecret, to be transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This insecure transmission can lead to th...

CVE-2026-10078

A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically clientid and clientsecret, to be transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This insecure transmission can lead to th...

CVE-2026-10078 Quay/config-tool: quay/config-tool: gitlab oauth client_secret exposed in url querystring

A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically clientid and clientsecret, to be transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This insecure transmission can lead to th...

CVE-2026-10078 Quay/config-tool: quay/config-tool: gitlab oauth client_secret exposed in url querystring

A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically clientid and clientsecret, to be transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This insecure transmission can lead to th...

CVE-2026-10078

The CVE-2026-10078 entry concerns Quay config-tool’s GitLab OAuth validator. The vulnerability causes client_id and client_secret to be sent in plaintext via URL query parameters during POST requests to the GitLab endpoint, enabling potential exposure of credentials in logs (server access logs, r...

CVE-2026-10078

A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically clientid and clientsecret, to be transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This insecure transmission can lead to th...