5174 matches found
PT-2026-77143
Name of the Vulnerable Software and Affected Versions Mastodon versions prior to 4.4.19 Mastodon versions 4.5.0 through 4.5.11 Description When LDAP authentication is configured with LDAP TLS NO VERIFY=true, the file app/models/concerns/user/ldap authenticable.rb mutates...
GHSA-2M8V-J782-FHVR vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, jupyter-base-notebook, gitlab-rails-ce...
CVE-2026-69185 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, jupyter-base-notebook, gitlab-rails-ce...
SUSE CVE-2026-73648
rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG reference elements in SVGALLOWLOCALHREF only when they used xlink:href, even though browsers also accept the plain href attribute. Applicatio...
CVE-2026-73648 vulnerabilities
Vulnerabilities for packages: pghero-fips, ruby3.2-rails, ruby4.0-rails, commercial-gitlab-rails-ee-fips, gitlab-rails-ce, ruby3.4-rails, gitlab-rails-ce-fips, ruby3.3-rails, commercial-gitlab-rails-ee, pghero...
CVE-2026-73648 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, ruby4.0-rails...
CVE-2026-73648
A flaw was found in rails-html-sanitizer, a component responsible for sanitizing HTML fragments in Rails applications. This vulnerability allows a remote attacker to perform Cross-Site Scripting XSS by exploiting improper sanitization of SVG Scalable Vector Graphics reference elements. The...
GO-2024-2576 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...
GO-2026-5024 vulnerabilities
Vulnerabilities for packages: helm, net-kourier-fips, gitlab-workhorse-ce, kubeflow-katib, kyverno, commercial-kyverno, trino, kube-conformance, etcd, k3s, gitlab-rails-ce, knative-operator-fips, containerd, gitlab-rails-ce-fips, upwind-agent, etcd-fips...
GO-2025-4116 vulnerabilities
Vulnerabilities for packages: falco-no-driver, cert-manager-fips, vault, backup-restore-operator, kube-conformance, etcd, k3s, consul-k8s, gitlab-rails-ce, gitlab-rails-ce-fips, rke2-runtime-fips, etcd-fips, terraform...
GO-2026-5094 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, gitness, portieris, portieris-fips, zot, kots, gitlab-rails-ce, envoy-gateway-fips, gitlab-rails-ce-fips, argocd-image-updater-fips, envoy-gateway...
GO-2026-5185 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, gitness, portieris, portieris-fips, zot, kots, gitlab-rails-ce, envoy-gateway-fips, gitlab-rails-ce-fips, argocd-image-updater-fips, envoy-gateway...
GO-2026-5693 vulnerabilities
Vulnerabilities for packages: argo-cd, argo-cd-fips, external-secrets-operator-fips, grafana-fips, guac, teleport, grafana, flux-fips, kyverno, terragrunt-fips, gitaly, terragrunt, flux, gitlab-rails-ce, nemo, gitlab-rails-ce-fips, external-secrets-operator, upwind-agent...
UBUNTU-CVE-2026-67990
basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An unauthenticated attacker can induce a logged-in user's browser to submit requests that are forwarded to enabled upstream write or management...
Linux Distros Unpatched Vulnerability : CVE-2026-67990
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An...
Linux Distros Unpatched Vulnerability : CVE-2026-73648
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG...
CVE-2026-73426 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.3-rails, ruby3.4-rails, ruby4.0-rails...
CVE-2026-73427 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.3-rails, ruby3.4-rails, ruby4.0-rails...