GHSA-93R5-FHX6-VMG9 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

GHSA-965W-775F-MR7G vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

CVE-2026-83613 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

CVE-2026-83615 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

CVE-2026-83616 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

GHSA-C7Q8-3CH8-VQPV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

GHSA-X4FP-J954-R2F4 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

CVE-2026-85062 vulnerabilities

Vulnerabilities for packages: arangodb, commercial-gitlab-rails-ee-fips, gitlab-rails-ce, gitlab-rails-ce-fips, commercial-gitlab-rails-ee, vitess...

GHSA-2WM5-Q62R-HMRV vulnerabilities

Vulnerabilities for packages: arangodb, commercial-gitlab-rails-ee-fips, gitlab-rails-ce, gitlab-rails-ce-fips, commercial-gitlab-rails-ee, vitess...

Linux Distros Unpatched Vulnerability : CVE-2026-53769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Avo is a framework to create admin panels for Ruby on Rails apps. From version 2.28.0 to before version 3.32.0, Avo's direct attachment upload endpoint lacks...

GHSA-F5VJ-F2HX-8M93 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, arangodb, argo-workflows, gitlab-rails-ce...

GHSA-M28W-2PQF-7QGJ vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, arangodb, argo-workflows, gitlab-rails-ce...

GHSA-P498-V437-472G vulnerabilities

Vulnerabilities for packages: authentik-fips, langfuse-fips, tileserver-gl, langfuse, authentik, gitlab-rails-ce, gitlab-rails-ce-fips, tileserver-gl-fips, vitess...

CVE-2026-83610 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, sqlpad, gitlab-rails-ce, wazuh-dashboard-fips, gitlab-rails-ce-fips...

GHSA-6GMQ-8VP8-GCM6 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, sqlpad, gitlab-rails-ce, wazuh-dashboard-fips, gitlab-rails-ce-fips...

GHSA-JMR9-QJV8-65GV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

CVE-2026-14631 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, arangodb, argo-workflows, gitlab-rails-ce...

CVE-2026-14620 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, arangodb, argo-workflows, gitlab-rails-ce...

CVE-2026-56876 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

CVE-2026-53769 Avo: Direct attachment upload endpoint lacks upload authorization and bypasses field-level upload policy

Avo is a framework to create admin panels for Ruby on Rails apps. From version 2.28.0 to before version 3.32.0, Avo's direct attachment upload endpoint lacks server-side upload authorization and bypasses the documented field-level upload policy methods such as uploadFIELDID?. An authenticated Avo...