CVE-2026-42256 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-rails, ruby3.3-net-imap, logstash, ruby3.4-net-imap, ruby3.4-rails, gitlab-rails-ce-fips, logstash-fips, jruby, ruby4.0-net-imap, truffleruby, ruby3.2-net-imap, ruby3.2-rails, gitlab-rails-ce, ruby4.0-rails...

GHSA-HM49-WCQC-G2XG vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-rails, ruby3.3-net-imap, logstash, ruby3.4-net-imap, ruby3.4-rails, gitlab-rails-ce-fips, logstash-fips, jruby, kube-fluentd-operator, ruby4.0-net-imap, truffleruby, ruby3.2-net-imap, ruby3.2-rails, gitlab-rails-ce, ruby4.0-rails...

GHSA-Q2MW-FVJ9-VVCW vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-rails, ruby3.3-net-imap, logstash, ruby3.4-net-imap, ruby3.4-rails, gitlab-rails-ce-fips, logstash-fips, jruby, kube-fluentd-operator, ruby4.0-net-imap, truffleruby, ruby3.2-net-imap, ruby3.2-rails, gitlab-rails-ce, ruby4.0-rails...

GHSA-75XQ-5H9V-W6PX vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-rails, ruby3.3-net-imap, logstash, ruby3.4-net-imap, ruby3.4-rails, gitlab-rails-ce-fips, logstash-fips, jruby, kube-fluentd-operator, ruby4.0-net-imap, truffleruby, ruby3.2-net-imap, ruby3.2-rails, gitlab-rails-ce, ruby4.0-rails...

CVE-2026-42257 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-rails, ruby3.3-net-imap, logstash, ruby3.4-net-imap, ruby3.4-rails, gitlab-rails-ce-fips, logstash-fips, jruby, kube-fluentd-operator, ruby4.0-net-imap, truffleruby, ruby3.2-net-imap, ruby3.2-rails, gitlab-rails-ce, ruby4.0-rails...

GHSA-87PF-FPWV-P7M7 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-rails, ruby3.3-net-imap, logstash, ruby3.4-net-imap, ruby3.4-rails, gitlab-rails-ce-fips, logstash-fips, jruby, ruby4.0-net-imap, truffleruby, ruby3.2-net-imap, ruby3.2-rails, gitlab-rails-ce, ruby4.0-rails...

GHSA-VCGP-9326-PQCP vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-rails, ruby3.3-net-imap, logstash, ruby3.4-net-imap, ruby3.4-rails, gitlab-rails-ce-fips, logstash-fips, jruby, kube-fluentd-operator, ruby4.0-net-imap, truffleruby, ruby3.2-net-imap, ruby3.2-rails, gitlab-rails-ce, ruby4.0-rails...

CVE-2026-42258 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-rails, ruby3.3-net-imap, logstash, ruby3.4-net-imap, ruby3.4-rails, gitlab-rails-ce-fips, logstash-fips, jruby, kube-fluentd-operator, ruby4.0-net-imap, truffleruby, ruby3.2-net-imap, ruby3.2-rails, gitlab-rails-ce, ruby4.0-rails...

Linux Distros Unpatched Vulnerability : CVE-2025-3922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.4 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have...

Linux Distros Unpatched Vulnerability : CVE-2025-6016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have...

Linux Distros Unpatched Vulnerability : CVE-2026-1660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain...

Linux Distros Unpatched Vulnerability : CVE-2025-13078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have...

dotcli (>=0.1.4, <=0.1.7), giraumon (0.0.1) +3 more potentially affected by CVE-2026-42284 via gitpython (2.1.5)

gitpython PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dotcli =0.1.4, =1.0.1, =1.0.0, =1.0.18 Source cves: CVE-2026-42284 Source advisory: OSV:GHSA-X2QX-6953-8485...

bentodev (>=0.1.17, <=2018.11.2), confsave (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2026-42284 via gitpython (2.1.3)

gitpython PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bentodev =0.1.17, =0.1.0, =0.9.0, =0.53.0 - reckoner 1.1.1 Source cves: CVE-2026-42284 Source advisory: OSV:GHSA-X2QX-6953-8485...

elemeno-ai-sdk (>=0.0.5, <=0.0.20), foresthog (>=0.9.0, <=1.3.6) +7 more potentially affected by CVE-2026-42284 via gitpython (2.1.1)

gitpython PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - elemeno-ai-sdk =0.0.5, =0.9.0, =0.1.0, =0.4.0, =0.0.5, =0.0.1, =1.0.0, =1.0.4, =1.0.10 Source cves: CVE-2026-42284 Source advisory:...

Exploit for CVE-2025-27407

CVE-2025-27407 GitLab Podman Lab Minimal local-only lab for p...

[SECURITY] Fedora 44 Update: glab-1.91.0-1.fc44

A GitLab CLI tool bringing GitLab to your command line...

BIT-GITLAB-2026-6515 Insufficient Session Expiration in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed a user to use invalidated or incorrectly scoped credentials to access Virtual Registries under certain conditions...

BIT-GITLAB-2026-5377 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that could have allowed an authenticated user to access titles of confidential or private issues in public projects due to improper access control in the issue description rendering process...

BIT-GITLAB-2026-5262 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.1.0 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain conditions could have allowed an unauthenticated user to access tokens in the Storybook development environment due to improper input...