GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: zot, gitlab-rails-ce, teleport-operator-fips, minio, opentofu-fips, falco-no-driver, cilium-cli, external-secrets-operator-fips, reports-server, knative-eventing-fips, harbor, kine, knative-kafka-broker-fips, buildah, nerdctl, omnictl-multiarch, prometheus-fips,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: zot, gitlab-rails-ce, teleport-operator-fips, minio, opentofu-fips, falco-no-driver, cilium-cli, external-secrets-operator-fips, reports-server, knative-eventing-fips, harbor, kine, knative-kafka-broker-fips, buildah, nerdctl, omnictl-multiarch, prometheus-fips,...

CVE-2026-52783

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, OpenProject's Storages module writes the OneDrive/SharePoint userless OAuth accesstoken plaintext to Rails.cache under the deterministic key storage..httpxaccesstoken, repopulated continuously by an...

CVE-2026-52783

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, OpenProject's Storages module writes the OneDrive/SharePoint userless OAuth accesstoken plaintext to Rails.cache under the deterministic key storage..httpxaccesstoken, repopulated continuously by an...

EUVD-2026-39869

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, OpenProject's Storages module writes the OneDrive/SharePoint userless OAuth accesstoken plaintext to Rails.cache under the deterministic key storage..httpxaccesstoken, repopulated continuously by an...

PT-2026-52914

Name of the Vulnerable Software and Affected Versions OpenProject versions prior to 17.3.3 OpenProject versions prior to 17.4.1 Description The Storages module writes the OneDrive/SharePoint userless OAuth access token in plaintext to the Rails.cache using the deterministic key storage..httpx...

CVE-2026-54904 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, logstash-fips, ruby4.0-rails, ruby3.3-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee, ruby3.2-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, logstash, cinc-auditor,...

GHSA-5PRR-V3J2-97MH vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby4.0-rails, commercial-gitlab-rails-ee, pact-broker-docker, ruby3.2-rails, gitlab-rails-ce, pact-broker-docker-fips, logstash, kube-logging-operator, ruby3.3-rails, ruby3.4-rails...

GHSA-5V8H-3H3Q-446P vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby4.0-rails, commercial-gitlab-rails-ee, pact-broker-docker, ruby3.2-rails, gitlab-rails-ce, pact-broker-docker-fips, logstash, kube-logging-operator, ruby3.3-rails, ruby3.4-rails...

GHSA-9CV2-CFXC-V4V2 vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby4.0-rails, commercial-gitlab-rails-ee, pact-broker-docker, ruby3.2-rails, gitlab-rails-ce, pact-broker-docker-fips, logstash, kube-logging-operator, ruby3.3-rails, ruby3.4-rails...

GHSA-8678-W3JW-XFC2 vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby4.0-rails, commercial-gitlab-rails-ee, pact-broker-docker, ruby3.2-rails, gitlab-rails-ce, pact-broker-docker-fips, logstash, kube-logging-operator, ruby3.3-rails, ruby3.4-rails...

GHSA-PHWJ-RPRQ-35PP vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby4.0-rails, commercial-gitlab-rails-ee, pact-broker-docker, ruby3.2-rails, gitlab-rails-ce, pact-broker-docker-fips, logstash, kube-logging-operator, ruby3.3-rails, ruby3.4-rails...

GHSA-WJV4-X9W8-WM3H vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby4.0-rails, commercial-gitlab-rails-ee, pact-broker-docker, ruby3.2-rails, gitlab-rails-ce, pact-broker-docker-fips, logstash, kube-logging-operator, ruby3.3-rails, ruby3.4-rails...

CVE-2026-54905 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, logstash-fips, ruby4.0-rails, ruby3.3-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee, ruby3.2-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, logstash, cinc-auditor,...

CVE-2026-54906 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, logstash-fips, ruby4.0-rails, ruby3.3-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee, ruby3.2-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, logstash, cinc-auditor,...

GHSA-WV3X-4VXV-WHPP vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, logstash-fips, ruby4.0-rails, ruby3.3-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee, ruby3.2-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, logstash, cinc-auditor,...

GHSA-6WX8-W4F5-WWCR vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, logstash-fips, ruby4.0-rails, ruby3.3-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee, ruby3.2-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, logstash, cinc-auditor,...

GHSA-H8W8-99G7-QMVJ vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, logstash-fips, ruby4.0-rails, ruby3.3-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee, ruby3.2-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, logstash, cinc-auditor,...

GHSA-P67V-3W7G-WJG7 vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby4.0-rails, commercial-gitlab-rails-ee, pact-broker-docker, ruby3.2-rails, gitlab-rails-ce, pact-broker-docker-fips, logstash, kube-logging-operator, ruby3.3-rails, ruby3.4-rails...

GHSA-WFPW-MMFH-QQ69 vulnerabilities

Vulnerabilities for packages: logstash-fips, ruby4.0-rails, commercial-gitlab-rails-ee, pact-broker-docker, ruby3.2-rails, gitlab-rails-ce, pact-broker-docker-fips, logstash, kube-logging-operator, ruby3.3-rails, ruby3.4-rails...