Linux Distros Unpatched Vulnerability : CVE-2025-9484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 16.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain...

Linux Distros Unpatched Vulnerability : CVE-2026-1101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, kpt, metacontroller, cluster-api-provider-vsphere, docker-credential-acr-env, docker-cli, cri-tools, knative-serving, kubeflow-katib, github-mcp-server, prometheus, pulumi-language-yaml, ip-masq-agent, docker-machine-driver-linode,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: cloudbeat, opa-fips-envoy, scorecard, kubevela-fips, kind, policy-controller, helm-fips, vendir-fips, opentofu-fips, redka, filebrowser, cluster-autoscaler-fips, crossplane, vault-benchmark, syft, bom, nats-fips, kyverno-fips, wal-g, vendir, knative-operator-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: cloudbeat, opa-fips-envoy, scorecard, kubevela-fips, kind, policy-controller, helm-fips, vendir-fips, opentofu-fips, redka, filebrowser, cluster-autoscaler-fips, crossplane, vault-benchmark, syft, bom, nats-fips, kyverno-fips, wal-g, vendir, knative-operator-fips,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter-fips, promxy, terraform-provider-azapi, cloudbeat, opa-fips-envoy, scorecard, kubevela-fips, prometheus-pushgateway-fips, policy-controller, helm-fips, prometheus-pgbouncer-exporter, spicedb-operator-fips, k8s-metacollector,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter-fips, promxy, terraform-provider-azapi, cloudbeat, opa-fips-envoy, scorecard, kubevela-fips, prometheus-pushgateway-fips, policy-controller, helm-fips, prometheus-pgbouncer-exporter, spicedb-operator-fips, k8s-metacollector,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi, opa-fips-envoy, helm-fips, kubernetes-dashboard-api, fq, crossplane-provider-aws-elasticache-fips, renovate, vendir, promxy-fips, cue, migrate, caddy, s5cmd-fips, configmap-reload, aws-fsx-csi-driver-fips, consul, virt-api,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: newrelic-k8s-metadata-injection, kubernetes-csi-external-snapshotter-fips, promxy, victoriametrics-operator-fips, terraform-provider-azapi, cloudbeat, opa-fips-envoy, scorecard, kubevela-fips, kind, mockery, prometheus-pushgateway-fips, policy-controller, helm-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: newrelic-k8s-metadata-injection, kubernetes-csi-external-snapshotter-fips, promxy, victoriametrics-operator-fips, terraform-provider-azapi, cloudbeat, opa-fips-envoy, scorecard, kubevela-fips, kind, mockery, prometheus-pushgateway-fips, policy-controller, helm-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: newrelic-k8s-metadata-injection, kubernetes-csi-external-snapshotter-fips, promxy, victoriametrics-operator-fips, terraform-provider-azapi, cloudbeat, opa-fips-envoy, scorecard, kubevela-fips, kind, mockery, prometheus-pushgateway-fips, policy-controller, helm-fips,...

GHSA-P423-J2CM-9VMQ vulnerabilities

Vulnerabilities for packages: airflow-core, authentik, gitlab-cng-fips, barman, wazuh-manager, jupyter-base-notebook, pgadmin4, ggshield, vllm-openai-cuda-12.9, datadog-agent-fips, kubeflow-volumes-web-app, mycli, dask-kubernetes, dagster, py3-cassandra-medusa, k8s-sidecar, nemo, opal,...

CVE-2026-39892 vulnerabilities

Vulnerabilities for packages: airflow-core, authentik, gitlab-cng-fips, barman, wazuh-manager, jupyter-base-notebook, pgadmin4, ggshield, vllm-openai-cuda-12.9, datadog-agent-fips, kubeflow-volumes-web-app, mycli, dask-kubernetes, dagster, py3-cassandra-medusa, k8s-sidecar, nemo, opal,...

FreeBSD : Gitlab -- vulnerabilities (099d4998-33cc-11f1-a7d1-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 099d4998-33cc-11f1-a7d1-2cf05da270f3 advisory. Gitlab reports: Exposed Method issue in websocket connections impacts GitLab CE/EE Denial of...

EUVD-2026-20793

GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports could have allowed an authenticated user to leak IP addresses of users viewing the report via specially crafted content...

EUVD-2025-209367

GitLab has remediated an issue in GitLab EE affecting all versions from 16.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstances could have allowed an authenticated user to have access to other users' email addresses via certain GraphQL queries...

EUVD-2026-20801

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user with custom role permissions to demote or remove higher-privileged group members due to improper authorization...

EUVD-2026-20797

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user to access confidential issues assigned to other users via CSV export due to insufficient authorization checks...

EUVD-2026-20795

GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user with developer-role permissions to modify protected environment settings due to improper authorization checks in t...

EUVD-2025-209365

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an unauthenticated user to cause denial of service by sending repeated GraphQL queries...