CVE-2026-53713 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, datadog-agent-fips, gitlab-operator, tigera-operator-fips, tigera-operator, datadog-agent...

CVE-2026-53716 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, datadog-agent-fips, gitlab-operator, tigera-operator-fips, tigera-operator, datadog-agent...

CVE-2026-53719 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, datadog-agent-fips, gitlab-operator, tigera-operator-fips, tigera-operator, datadog-agent...

CVE-2026-53718 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, datadog-agent-fips, gitlab-operator, tigera-operator-fips, tigera-operator, datadog-agent...

GHSA-FCRP-7GC2-93G7 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, datadog-agent-fips, gitlab-operator, tigera-operator-fips, tigera-operator, datadog-agent...

GHSA-8FV2-88GG-HM7Q vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, datadog-agent-fips, gitlab-operator, tigera-operator-fips, tigera-operator, datadog-agent...

GHSA-M2V6-2JMH-4C68 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, datadog-agent-fips, gitlab-operator, tigera-operator-fips, tigera-operator, datadog-agent...

GHSA-22XC-XG2R-9J7V vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, datadog-agent-fips, gitlab-operator, tigera-operator-fips, tigera-operator, datadog-agent...

GHSA-CXPQ-8V7Q-CG56 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, datadog-agent-fips, gitlab-operator, tigera-operator-fips, tigera-operator, datadog-agent...

The vulnerability of the mirroring mechanism of the Git-based software platform for collaborative code development, GitLab EE, allows a perpetrator to compromise the confidentiality of the protected information.

The vulnerability of the repository mirroring mechanism of the Git-based software platform for collaborative code development in GitLab CE/EE is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the...

The vulnerability of the mechanism for checking access rights to metadata of working elements in private projects of a Git-based software platform for collaborative code development on GitLab EE allows a violator to compromise the confidentiality of the protected information.

The vulnerability of the mechanism for checking access rights to metadata of working elements in private projects of a Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authorization process. Exploiting this vulnerability could allow ...

The vulnerability of the mechanism for displaying discussions about commit messages and project-specific links on the Git-based software platform for collaborative code development on GitLab CE/EE allows a perpetrator to compromise the confidentiality of the protected information.

The vulnerability of the mechanism for displaying commit discussions and project-specific links on the Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to...

CVE-2026-13320 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-rails-ce, gitlab-runner-fips...

CVE-2026-7492 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-rails-ce, gitlab-runner-fips...

GHSA-PGGX-2V9R-J6GM vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-rails-ce, gitlab-runner-fips...

GHSA-H5PW-H3J7-CJ7F vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-rails-ce, gitlab-runner-fips...

CVE-2025-12506 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-rails-ce, gitlab-runner-fips...

GHSA-M49F-RVV4-R4RV vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-rails-ce, gitlab-runner-fips...

Path Traversal

Overview @zereight/mcp-gitlab is a GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more Affected versions of this package are vulnerable to Path Traversal in the job URL construction in build/index.js, which interpolates the jobid parameter into GitLab API...

CVE-2026-61462

mcp-gitlab contains a path traversal vulnerability in the jobid parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted jobid values like ../../../user to escape the intended path prefix and access arbitrary GitLab API...