23817 matches found
GO-2026-4514 vulnerabilities
Vulnerabilities for packages: terragrunt, prometheus, nuclei, terraform-mcp-server, goreleaser, lazygit, k3s, opentelemetry-collector-contrib, dgraph, cri-tools, redpanda, datadog-agent, mcp-grafana, grafana-alloy, malcontent, weaviate, ollama, tempo, opentelemetry-collector, rclone, teleport,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: pulumi-language-java, skaffold, kaniko, kubescape, trivy-operator, pulumi-language-dotnet, kyverno, nuclei, syft, apko, argocd-image-updater, external-secrets-operator, melange, src-fingerprint, trivy, kots, tfsec, trufflehog, zot, gitea, chezmoi, pulumi,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: skaffold, cilium, sops, step, syft, ksops, argocd-image-updater, k3s, crossplane-provider-aws-firehose, tkn, zot, crossplane-provider-aws-elasticache, cloudflared, cloud-provider-aws, openbao, kine, crossplane-provider-aws-sqs, mods, guac, gatus, rootlesskit, grype,...
FreeBSD : Gitlab -- vulnerabilities (2c73b6d5-971c-11f1-bdc8-2cf05da270f3)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2c73b6d5-971c-11f1-bdc8-2cf05da270f3 advisory. Gitlab reports: Cross-site Scripting issue in Analytics Dashboards table field configuration...
CVE-2026-58510
GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public-private...
Vulnerabilities managed in GitLab Enterprise Edition and Community Edition
GitLab has identified several vulnerabilities in its GitLab Enterprise Edition and Community Edition versions, ranging from 12.0 to 19.2.2. These vulnerabilities concern various aspects of GitLab, including incorrect privilege allocation, where users with pending membership statuses inadvertently...
CVE-2026-16494
creationtimestamp| type| source ---|---|--- 2026-08-13 10:22:02+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-20 2026-08-13 14:05:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m...
CVE-2026-15216
creationtimestamp| type| source ---|---|--- 2026-08-13 10:21:59+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-20 2026-08-13 14:05:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m 2026-08-13 20:15:12+00:00| seen|...
CVE-2026-19228
creationtimestamp| type| source ---|---|--- 2026-08-13 10:21:57+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-20 2026-08-13 14:05:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m 2026-08-21 00:07:06+00:00| seen|...
CVE-2026-15217
creationtimestamp| type| source ---|---|--- 2026-08-13 10:21:54+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-20 2026-08-13 14:05:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m 2026-08-13 20:15:15+00:00| seen|...
CVE-2026-54465 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee...
CVE-2026-54463 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee...
CVE-2026-54464 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee...
GHSA-GHHP-3QVG-889P vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee...
GHSA-8J3G-F24P-4MPW vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee...
GHSA-33PH-FCCM-39PJ vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee...
CVE-2026-6821
GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to bypass IP-based access restrictions and read limited merge request information from a...
CVE-2026-4879
GitLab has remediated an issue in GitLab EE affecting all versions from 16.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to view external status check configuration restricted to...
CVE-2026-19228
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to cause AI usage to be attributed to another namespace, due to improper authorization of identity information...
CVE-2026-18433
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to read policy configuration belonging to a namespace they were not authorized to access, due to incorrect...