Linux Distros Unpatched Vulnerability : CVE-2026-4524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: gitaly-fips, chainloop-cli-fips, cerbos, coder-fips, argo-events, mapotf-fips, flux-image-automation-controller, argocd-image-updater, rancher-fleet, src-fingerprint-fips, gomplate-fips, gitlab-rails-ce, gitsign, coder, k9s-fips, argo-workflows, argo-events-fips,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: gitaly-fips, chainloop-cli-fips, cerbos, coder-fips, argo-events, mapotf-fips, flux-image-automation-controller, argocd-image-updater, rancher-fleet, src-fingerprint-fips, gomplate-fips, gitlab-rails-ce, gitsign, coder, k9s-fips, argo-workflows, argo-events-fips,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: gitaly-fips, chainloop-cli-fips, cerbos, coder-fips, argo-events, mapotf-fips, flux-image-automation-controller, argocd-image-updater, rancher-fleet, src-fingerprint-fips, gomplate-fips, gitlab-rails-ce, gitsign, coder, k9s-fips, argo-workflows, argo-events-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: gitaly-fips, chainloop-cli-fips, cerbos, coder-fips, argo-events, mapotf-fips, flux-image-automation-controller, argocd-image-updater, rancher-fleet, src-fingerprint-fips, gomplate-fips, gitlab-rails-ce, gitsign, coder, k9s-fips, argo-workflows, argo-events-fips,...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

CLEANSTART-2026-YZ90223 Security fixes for CVE-2026-27141, CVE-2026-32285, CVE-2026-32952, CVE-2026-33186, CVE-2026-33762, CVE-2026-34040, CVE-2026-34165, CVE-2026-34986, CVE-2026-35469, CVE-2026-39883, ghsa-3xc5-wrhm-f963, ghsa-6g7g-w4f8-9c9x, ghsa-78h2-9frx-2jm8, ghsa-gm2x-2g9h-ccm8, ghsa-hfvc-g4fc-pqhx, ghsa-jhf3-xxhw-2wpp, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj, ghsa-xmrv-pmrh-hhx2 applied in versions: 18.11.1-r0

Multiple security vulnerabilities affect the gitlab-runner package. These issues are resolved in later releases. See references for individual vulnerability details...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the API-level authorization process. An attacker can create issues or attach comments to a locked group by sending direct API requests as a member of multiple groups. Remediation Upgrade...

CVE-2026-3117

Mattermost Plugins versions =11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or setup webhook connections via the gitlab instance option or the /gitlab webhook option commands...

EUVD-2026-30748

Mattermost Plugins versions =11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or setup webhook connections via the gitlab instance option or the /gitlab webhook option commands...

CVE-2026-3117

Mattermost plugins contain a permission-check flaw in the GitLab plugin command processing. Versions affected: Mattermost Plugins

CVE-2026-3117

Mattermost Plugins versions =11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or setup webhook connections via the gitlab instance option or the /gitlab webhook option commands...

CVE-2026-3117 Instance and webhook GitLab plugin commands were able to be run by non-admin users

Mattermost Plugins versions =11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or setup webhook connections via the gitlab instance option or the /gitlab webhook option commands...