GitLab 8.11 < 18.7.6 / 18.8 < 18.8.6 / 18.9 < 18.9.2 (CVE-2026-3848)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to make unintend...

GitLab 注入漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. There is a vulnerability in GitLab, which stems from improper input...

CVE-2026-27137 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, flux-image-reflector-controller, flux-source-watcher, cluster-autoscaler-fips, stakater-reloader, victoriametrics-cluster-fips, flux-image-automation-controller, flux-operator, pluto, pgwatch, grafana-rollout-operator, victorialogs-fips, go,...

GHSA-PH5J-38MG-J6HP vulnerabilities

Vulnerabilities for packages: flux-helm-controller, flux-image-reflector-controller, flux-source-watcher, cluster-autoscaler-fips, stakater-reloader, victoriametrics-cluster-fips, flux-image-automation-controller, flux-operator, pluto, pgwatch, grafana-rollout-operator, victorialogs-fips, go,...

GHSA-7HFW-R8QC-89V4 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, flux-image-reflector-controller, flux-source-watcher, cluster-autoscaler-fips, stakater-reloader, victoriametrics-cluster-fips, flux-image-automation-controller, flux-operator, pluto, pgwatch, grafana-rollout-operator, victorialogs-fips, go,...

CVE-2026-27138 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, flux-image-reflector-controller, flux-source-watcher, cluster-autoscaler-fips, stakater-reloader, victoriametrics-cluster-fips, flux-image-automation-controller, flux-operator, pluto, pgwatch, grafana-rollout-operator, victorialogs-fips, go,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: knative-operator, gitness, tfsec, buildah, crossplane-provider-aws-iam, fscrypt, sftpgo-plugin-eventstore, docker-cli, gitaly, yunikorn-k8shim, cluster-autoscaler, k8sgpt, pgpool2exporter, litefs, sftpgo-plugin-auth, terraform-provider-random, mattermost,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: knative-operator, gitness, tfsec, buildah, crossplane-provider-aws-iam, fscrypt, sftpgo-plugin-eventstore, docker-cli, gitaly, yunikorn-k8shim, cluster-autoscaler, k8sgpt, pgpool2exporter, litefs, sftpgo-plugin-auth, terraform-provider-random, mattermost,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: knative-operator, gitness, tfsec, buildah, crossplane-provider-aws-iam, fscrypt, sftpgo-plugin-eventstore, docker-cli, gitaly, yunikorn-k8shim, cluster-autoscaler, k8sgpt, pgpool2exporter, litefs, sftpgo-plugin-auth, terraform-provider-random, mattermost,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, azure-service-operator, aws-load-balancer-controller, runc, cerbos, rook, prometheus-pushgateway, kyverno, karma, knative-operator, terraform-provider-pagerduty, gitness, gogatekeeper, tfsec, buildah, opentelemetry-collector-contrib,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, azure-service-operator, aws-load-balancer-controller, runc, cerbos, rook, prometheus-pushgateway, kyverno, karma, knative-operator, terraform-provider-pagerduty, gitness, gogatekeeper, tfsec, buildah, opentelemetry-collector-contrib,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: terraform-provider-aws-fips, argocd-image-updater, opencost, k6-operator, aws-flb-kinesis-fips, crossplane-provider-gitlab, rancher, terraform-provider-acme-fips, crossplane-provider-aws-efs-fips, aws-flb-firehose-fips, prometheus-pushgateway, longhorn-manager-fips,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: terraform-provider-aws-fips, argocd-image-updater, opencost, k6-operator, aws-flb-kinesis-fips, crossplane-provider-gitlab, kubeflow-pipelines, rabbitmq-default-user-credential-updater-fips, stakater-reloader, rancher, aws-otel-collector, node-feature-discovery,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: terraform-provider-aws-fips, argocd-image-updater, opencost, k6-operator, aws-flb-kinesis-fips, crossplane-provider-gitlab, kubeflow-pipelines, rabbitmq-default-user-credential-updater-fips, stakater-reloader, rancher, aws-otel-collector, node-feature-discovery,...

Linux Distros Unpatched Vulnerability : CVE-2025-14511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowe...

GitLab 14.4 < 18.7.5 / 18.8 < 18.8.5 / 18.9 < 18.9.1 (CVE-2026-1662)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause Denia...

GitLab 17.11 < 18.7.5 / 18.8 < 18.8.5 / 18.9 < 18.9.1 (CVE-2026-1747)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-rol...

Linux Distros Unpatched Vulnerability : CVE-2026-1747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain...

GitLab 16.2 < 18.7.5 / 18.8 < 18.8.5 / 18.9 < 18.9.1 (CVE-2026-0752)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that under certain circumstances, could have allowed an...

Use of Client-Side Authentication

Overview Affected versions of this package are vulnerable to Use of Client-Side Authentication in the VCS oauth. An attacker can gain unauthorized access by exploiting weaknesses in the GitLab login mechanism or by deriving a JWT authentication token without requiring a server reboot. Remediation...