296 matches found
CVE-2024-10219 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
GHSA-RWWP-3RV3-J6Q6 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
Linux Distros Unpatched Vulnerability : CVE-2022-4201
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local...
Linux Distros Unpatched Vulnerability : CVE-2020-13350
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instance administrators to pause/resume runner...
CVE-2022-2251
Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a user who creates a branch with a specially crafted name and gets another user to trigger a pipeline to execute commands in the runner as that othe...
CVE-2022-4201
A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local addresses when configuring a malicious GitLab Runner...
CVE-2022-1099
Adding a very large number of tags to a runner in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an attacker to impact the performance of GitLab...
CVE-2021-39939
An uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions starting from 13.7 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker triggering a job with a specially crafted docker image to...
CVE-2021-39947
In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2 would re-use the file descriptor 0 for multiple traces and mix the output of several jobs...
GHSA-WPXF-3MM2-76F8 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-G5QP-3JX2-P69R vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-G5QP-3JX2-P69R vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
GHSA-WPXF-3MM2-76F8 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
CVE-2025-0475 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
CVE-2025-0475 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2024-8186 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
CVE-2024-8186 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-V84C-53C6-XMMP vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips...