Lucene search
+L

542 matches found

OSV
OSV
added 2026/05/04 10:28 p.m.9 views

GHSA-G27R-R6PH-VF5R sequoia-git has broken hard revocation handling

Before sq-git checks if a commit can be authenticated, it first looks for hard revocations. Because parsing a policy is expensive and a project's policy rarely changes, sq-git has an optimization to only check a policy if it hasn't checked it before. It does this by maintaining a set of policies...

1.8CVSS5.8AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/05/04 10:28 p.m.15 views

sequoia-git has broken hard revocation handling

Before sq-git checks if a commit can be authenticated, it first looks for hard revocations. Because parsing a policy is expensive and a project's policy rarely changes, sq-git has an optimization to only check a policy if it hasn't checked it before. It does this by maintaining a set of policies...

5.8AI score
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/04 12:0 a.m.15 views

PT-2026-37357

Before sq-git checks if a commit can be authenticated, it first looks for hard revocations. Because parsing a policy is expensive and a project's policy rarely changes, sq-git has an optimization to only check a policy if it hasn't checked it before. It does this by maintaining a set of policies...

1.8CVSS5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/04/21 12:0 p.m.12 views

RUSTSEC-2026-0109 Broken hard revocation handling

Before sq-git checks if a commit can be authenticated, it first looks for hard revocations. Because parsing a policy is expensive and a project's policy rarely changes, sq-git has an optimization to only check a policy if it hasn't checked it before. It does this by maintaining a set of policies...

1.8CVSS5.5AI score
SaveExploits0References3
RustSec
RustSec
added 2026/04/21 12:0 p.m.19 views

Broken hard revocation handling

Before sq-git checks if a commit can be authenticated, it first looks for hard revocations. Because parsing a policy is expensive and a project's policy rarely changes, sq-git has an optimization to only check a policy if it hasn't checked it before. It does this by maintaining a set of policies...

5.4AI score
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-2726

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have...

4.3CVSS5.6AI score0.00194EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.16 views

GitLab Enterprise Edition(EE)和GitLab Community Edition(CE) 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. Versions of GitLab CE/EE prior to 18.8.7, 18.9.3, and 18.10.1 contain...

4.3CVSS5.8AI score0.00194EPSS
SaveExploits0References4
OSV
OSV
added 2026/03/02 9:8 a.m.10 views

BIT-GITLAB-2026-1388 Inefficient Regular Expression Complexity in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause regular expression denial of service by sending specially crafted input to a merge request endpoint und...

7.5CVSS6AI score0.0035EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/02/26 10:34 p.m.7 views

CVE-2026-1388

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause regular expression denial of service by sending specially crafted input to a merge request endpoint und...

7.5CVSS5.4AI score0.0035EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/02/25 9:31 p.m.10 views

EUVD-2026-8721

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause regular expression denial of service by sending specially crafted input to a merge request endpoint und...

7.5CVSS5.4AI score0.0035EPSS
SaveExploits0References4
NVD
NVD
added 2026/02/25 9:16 p.m.13 views

CVE-2026-1388

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause regular expression denial of service by sending specially crafted input to a merge request endpoint und...

7.5CVSS0.0035EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/02/25 9:16 p.m.9 views

CVE-2026-1388

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause regular expression denial of service by sending specially crafted input to a merge request endpoint und...

7.5CVSS5.9AI score0.0035EPSS
SaveExploits0References4
OSV
OSV
added 2026/02/25 9:16 p.m.10 views

UBUNTU-CVE-2026-1388

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause regular expression denial of service by sending specially crafted input to a merge request endpoint und...

7.5CVSS5.8AI score0.0035EPSS
SaveExploits0References5
CVE
CVE
added 2026/02/25 8:5 p.m.26 views

CVE-2026-1388

GitLab CE/EE is affected by CVE-2026-1388: vulnerable in all versions up to but not including 18.7.5 (9.2–), up to but not including 18.8.5, and up to but not including 18.9.1. The issue is an inefficient regular expression that could allow an unauthenticated user to cause a Denial of Service by ...

7.5CVSS5.4AI score0.0035EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/02/25 8:5 p.m.28 views

CVE-2026-1388 Inefficient Regular Expression Complexity in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause regular expression denial of service by sending specially crafted input to a merge request endpoint und...

7.5CVSS0.0035EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/02/25 8:5 p.m.27 views

CVE-2026-1388

Removed by vendor...

7.5CVSS5.8AI score0.0035EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/02/25 8:5 p.m.5 views

CVE-2026-1388 Inefficient Regular Expression Complexity in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause regular expression denial of service by sending specially crafted input to a merge request endpoint und...

7.5CVSS6AI score0.0035EPSS
SaveExploits0References3
OSV
OSV
added 2026/02/25 8:5 p.m.9 views

CVE-2026-1388 Inefficient Regular Expression Complexity in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause regular expression denial of service by sending specially crafted input to a merge request endpoint und...

7.5CVSS5.6AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/02/25 12:0 a.m.10 views

PT-2026-21994

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 9.2 through 18.7.4 GitLab CE/EE versions 18.8 through 18.8.4 GitLab CE/EE versions 18.9 through 18.9.0 Description An unauthenticated user could potentially cause a denial of service by sending specially crafted input to ...

7.5CVSS5.2AI score0.0035EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2026/02/12 12:0 a.m.7 views

GitLab 15.6 < 18.4.6 / 18.5 < 18.5.4 / 18.6 < 18.6.2 (CVE-2025-12734)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to, under certai...

3.5CVSS5.6AI score0.00263EPSS
SaveExploits0References5
Rows per page
Query Builder