GHSA-35PC-QWV6-4858 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-cng, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner...

GHSA-8JC8-CVQJ-P926 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-cng, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner...

GHSA-94P8-87FF-W336 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-cng, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner...

CVE-2025-14562 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-cng, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner...

CVE-2026-14351 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-cng, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner...

CVE-2026-6267 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-cng, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner...

CVE-2026-6336 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-cng, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner...

GHSA-G9G2-QC64-JGCJ vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-cng, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner...

CVE-2026-12436 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-cng, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner...

GHSA-6FHJ-CGMM-XFX6 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-cng, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner...

VulnCheck KEV: CVE-2023-2825

An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups...

Security-First Evaluation of Text-To-Terraform: Benchmarking LLMs and SLMs for Secure IaC Generation

Cloud misconfiguration remains a leading cause of security incidents, yet whether LLMs and SLMs can generate security-compliant Infrastructure-as-Code is an open question. We benchmark seven models, three closed LLMs Claude Opus 4, GPT-5.4, Gemini 2.5 Pro and four open SLMs Qwen2.5-Coder-14B,...

CVE-2026-66066 vulnerabilities

Vulnerabilities for packages: pghero, ruby3.3-rails, gitlab-rails-ce, pghero-fips, gitlab-rails-ce-fips...

GHSA-XR9X-R78C-5HRM vulnerabilities

Vulnerabilities for packages: pghero, ruby3.3-rails, gitlab-rails-ce, pghero-fips, gitlab-rails-ce-fips...

GitLab 11.8 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-15975)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an...

The vulnerability of the configuration processor for protected branches of the Git-based software platform, which allows a hacker to modify the configuration of protected branches.

The vulnerability of the configuration processor for protected branches in the git-based software platform, which is used for collaborative code development in GitLab CE/EE, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to...

GitLab 18.0 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-12436)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an...

GitLab 17.0 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-13113)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated...

GitLab 14.0 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-3093)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker t...

GitLab 16.6 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-6336)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthoriz...