27158 matches found
CVE-2026-22860 vulnerabilities
Vulnerabilities for packages: gitlab-cng, ruby3.4-rails, gitlab-rails-ce-fips, ruby3.4-rack, ruby3.3-rails, ruby4.0-rack, ruby3.2-rack, ruby4.0-rails, ruby3.2-rails, ruby3.3-rack, kube-fluentd-operator, gitlab-rails-ce, logstash...
GitLab Enterprise Edition Authentication Bypass
The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the AI model...
GitLab Access Control Disclosure
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in restricting access to personal information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information...
GitLab Enterprise Edition Authentication Bypass
The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the AI model...
com.cloudbees.jenkins.plugins:mansion-cloud (>=1.16, <=1.28), com.cloudbees.jenkins.plugins:oki-docki (1.0) +64 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.532)
org.jenkins-ci.main:jenkins-core MAVEN version 1.532 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:mansion-cloud =1.16, =1.10, =1.4.0, =1.20, =1.532, =1.35, =1.45 -...
com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.564)
org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...
com.switchfly:gitlab-merge-request-jenkins (1.2.2), org.jenkins-ci.main:jenkins-test-harness (1.563) +2 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.563)
org.jenkins-ci.main:jenkins-core MAVEN version 1.563 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.switchfly:gitlab-merge-request-jenkins 1.2.2 - org.jenkins-ci.main:jenkins-test-harness 1.5...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2021-22175link is external GitLab Server-Side Request Forgery SSRF Vulnerability CVE-2026-22769link is external Dell RecoverPoint for Virtual Machines RP4VMs Us...
GitLab XSS
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
GitLab Server-Side Request Forgery (SSRF) Vulnerability
GitLab contains a server-side request forgery SSRF vulnerability when requests to the internal network for webhooks are enabled...
CVE-2026-0595 vulnerabilities
Vulnerabilities for packages: gitlab-pages-fips, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-rails-ce, gitlab-runner...
CVE-2026-1282 vulnerabilities
Vulnerabilities for packages: gitlab-pages-fips, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-runner...
CVE-2026-1458 vulnerabilities
Vulnerabilities for packages: gitlab-pages-fips, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-rails-ce, gitlab-runner...
GHSA-95P8-CCJW-3G7F vulnerabilities
Vulnerabilities for packages: gitlab-pages-fips, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-runner...
GHSA-CF2V-M456-7QJF vulnerabilities
Vulnerabilities for packages: gitlab-pages-fips, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-rails-ce, gitlab-runner...
GHSA-M668-XFWP-34X6 vulnerabilities
Vulnerabilities for packages: gitlab-pages-fips, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-rails-ce, gitlab-runner...
GHSA-W487-9R9P-6P96 vulnerabilities
Vulnerabilities for packages: gitlab-pages-fips, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-runner...
CVE-2026-1094 vulnerabilities
Vulnerabilities for packages: gitlab-pages-fips, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-runner...