bentodev (>=0.1.17, <=2018.11.2), confsave (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2026-78678 via gitpython (2.1.3)

gitpython PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bentodev =0.1.17, =0.1.0, =0.9.0, =0.53.0 - reckoner 1.1.1 Source cves: CVE-2026-78678 Source advisory: OSV:GHSA-5XXX-QHH7-9287...

dotcli (>=0.1.4, <=0.1.7), giraumon (0.0.1) +3 more potentially affected by CVE-2026-78678 via gitpython (2.1.5)

gitpython PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dotcli =0.1.4, =1.0.1, =1.0.0, =1.0.18 Source cves: CVE-2026-78678 Source advisory: OSV:GHSA-5XXX-QHH7-9287...

dotcli (>=0.1.4, <=0.1.7), giraumon (0.0.1) +3 more potentially affected by CVE-2026-78676 via gitpython (2.1.5)

gitpython PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dotcli =0.1.4, =1.0.1, =1.0.0, =1.0.18 Source cves: CVE-2026-78676 Source advisory: OSV:GHSA-284H-M62Q-GF8W...

elemeno-ai-sdk (>=0.0.5, <=0.0.20), foresthog (>=0.9.0, <=1.3.6) +7 more potentially affected by CVE-2026-78676 via gitpython (2.1.1)

gitpython PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - elemeno-ai-sdk =0.0.5, =0.9.0, =0.1.0, =0.4.0, =0.0.5, =0.0.1, =1.0.0, =1.0.4, =1.0.10 Source cves: CVE-2026-78676 Source advisory:...

bentodev (>=0.1.17, <=2018.11.2), confsave (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2026-78676 via gitpython (2.1.3)

gitpython PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bentodev =0.1.17, =0.1.0, =0.9.0, =0.53.0 - reckoner 1.1.1 Source cves: CVE-2026-78676 Source advisory: OSV:GHSA-284H-M62Q-GF8W...

bentodev (>=0.1.17, <=2018.11.2), confsave (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2026-78675 via gitpython (2.1.3)

gitpython PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bentodev =0.1.17, =0.1.0, =0.9.0, =0.53.0 - reckoner 1.1.1 Source cves: CVE-2026-78675 Source advisory: OSV:GHSA-7833-FR7J-V32Q...

dotcli (>=0.1.4, <=0.1.7), giraumon (0.0.1) +3 more potentially affected by CVE-2026-78675 via gitpython (2.1.5)

gitpython PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dotcli =0.1.4, =1.0.1, =1.0.0, =1.0.18 Source cves: CVE-2026-78675 Source advisory: OSV:GHSA-7833-FR7J-V32Q...

CVE-2026-83610 vulnerabilities

Vulnerabilities for packages: sqlpad, wazuh-dashboard, gitlab-rails-ce, gitlab-rails-ce-fips, wazuh-dashboard-fips...

GHSA-M28W-2PQF-7QGJ vulnerabilities

Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, gitlab-rails-ce, argo-workflows...

GHSA-F5VJ-F2HX-8M93 vulnerabilities

Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, gitlab-rails-ce, argo-workflows...

GHSA-P498-V437-472G vulnerabilities

Vulnerabilities for packages: tileserver-gl, tileserver-gl-fips, gitlab-rails-ce, authentik, langfuse, authentik-fips, gitlab-rails-ce-fips, langfuse-fips, vitess...

GHSA-JMR9-QJV8-65GV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

GHSA-6GMQ-8VP8-GCM6 vulnerabilities

Vulnerabilities for packages: sqlpad, wazuh-dashboard, gitlab-rails-ce, gitlab-rails-ce-fips, wazuh-dashboard-fips...

CVE-2026-14631 vulnerabilities

Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, gitlab-rails-ce, argo-workflows...

CVE-2026-14620 vulnerabilities

Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, gitlab-rails-ce, argo-workflows...

CVE-2026-56876 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

GHSA-5JHF-FPP7-V2PV vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, pact-broker-docker-fips, pact-broker-docker, ruby3.4-rails, kube-logging-operator, ruby4.0-rails, gitlab-rails-ce, gitlab-rails-ce-fips, ruby3.2-rails...

CVE-2026-79771 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, pact-broker-docker-fips, pact-broker-docker, ruby3.4-rails, kube-logging-operator, ruby4.0-rails, gitlab-rails-ce, gitlab-rails-ce-fips, ruby3.2-rails...

CVE-2026-79770 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, pact-broker-docker-fips, pact-broker-docker, ruby3.4-rails, kube-logging-operator, ruby4.0-rails, gitlab-rails-ce, gitlab-rails-ce-fips, ruby3.2-rails...

Dependency Scanning v2.1.1

Component for Dependency and License Scanning This component generates a CycloneDX Software Bill of Materials, which is used by GitLab to identify a project's dependencies, and their licenses. This CycloneDX Software Bill of Materials is compatible with the GitLab taxonomy. Additionally, this...