26587 matches found
GitLab 18.8 < 18.9.7 / 18.10 < 18.10.6 / 18.11 < 18.11.3 (CVE-2026-7471)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Server-Side Request Forgery SSRF in GitLab CVE-2026-7471 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 809...
GitLab 18.7 < 18.9.7 / 18.10 < 18.10.6 / 18.11 < 18.11.3 (CVE-2026-6073)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in GitLab CVE-2026-6073 Note that Nessus has not tested for this issue but has instead relied only on the application...
GitLab 16.7 < 18.9.7 / 18.10 < 18.10.6 / 18.11 < 18.11.3 (CVE-2026-3074)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Authorization Bypass Through User-Controlled Key in GitLab CVE-2026-3074 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
GitLab 17.6 < 18.9.7 / 18.10 < 18.10.6 / 18.11 < 18.11.3 (CVE-2026-3073)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Authorization Bypass Through User-Controlled Key in GitLab CVE-2026-3073 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
GitLab 16.0 < 18.9.7 / 18.10 < 18.10.6 / 18.11 < 18.11.3 (CVE-2026-1322)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Business Logic Errors in GitLab CVE-2026-1322 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenabl...
The vulnerability of monitoring panels in the Git-based software platform allows attackers to perform cross-site scripting attacks during collaborative code development in GitLab Enterprise Edition.
The vulnerability of monitoring panels in the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripti...
GitLab 18.7 < 18.9.7 / 18.10 < 18.10.6 / 18.11 < 18.11.3 (CVE-2026-7377)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in GitLab CVE-2026-7377 Note that Nessus has not tested for this issue but has instead relied only on the application...
GitLab 15.1 < 18.9.7 / 18.10 < 18.10.6 / 18.11 < 18.11.3 (CVE-2026-8144)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Missing Authorization in GitLab CVE-2026-8144 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenabl...
GitLab 15.7 < 18.9.7 / 18.10 < 18.10.6 / 18.11 < 18.11.3 (CVE-2026-6883)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Missing Authorization in GitLab CVE-2026-6883 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenabl...
CVE-2026-42195
draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.9, the draw.io client accepts a ?gitlab= URL parameter that overrides the GitLab server URL used during OAuth sign-in. A crafted link causes the user's click on draw.io's "Authorize in GitLab" dialog to ope...
PT-2026-40876
Name of the Vulnerable Software and Affected Versions GitLab EE versions 18.7 through 18.9.6 GitLab EE versions 18.10 through 18.10.5 GitLab EE versions 18.11 through 18.11.2 Description An issue in customizable analytics dashboards allows an authenticated user to execute arbitrary JavaScript in...
CVE-2026-45022 vulnerabilities
Vulnerabilities for packages: argo-cd, argo-workflows, pulumi-language-dotnet, goreleaser, melange, wolfictl, trivy, argocd-image-updater, nfpm, gitea, pulumi-language-java, zarf, xeol, cerbos, gptscript, external-secrets-operator, scorecard, witness, gitaly, k9s, skaffold, apko, grafana-alloy,...
GHSA-389R-GV7P-R3RP vulnerabilities
Vulnerabilities for packages: argo-cd, argo-workflows, pulumi-language-dotnet, goreleaser, melange, wolfictl, trivy, argocd-image-updater, nfpm, gitea, pulumi-language-java, zarf, xeol, cerbos, gptscript, external-secrets-operator, scorecard, witness, gitaly, k9s, skaffold, apko, grafana-alloy,...
CVE-2026-45022 vulnerabilities
Vulnerabilities for packages: gomplate, cloudbeat, terragrunt, coder, gomplate-fips, xeol-fips, grype, dagger, osv-scanner, chainloop-cli, nuclei, xeol, upwind-agent, flux-source-controller, pulumi-language-java, trufflehog, tfsec, kubescape-server, packer, mapotf, chainctl, gitaly-fips, skaffold...
GHSA-389R-GV7P-R3RP vulnerabilities
Vulnerabilities for packages: gomplate, cloudbeat, terragrunt, coder, gomplate-fips, xeol-fips, grype, dagger, osv-scanner, chainloop-cli, nuclei, xeol, upwind-agent, flux-source-controller, pulumi-language-java, trufflehog, tfsec, kubescape-server, packer, mapotf, chainctl, gitaly-fips, skaffold...
GHSA-526F-JXPJ-JMG2 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...
CVE-2026-43870 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...
CVE-2026-44836 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...