GHSA-MF63-GQMM-MV3V vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-H7PC-V4HV-WJWM vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-PQHQ-PV8W-43HJ vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-2GPM-G93X-8FR4 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-C459-GW6C-CH4J vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-VWXF-55XH-P3XF vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2019-10114 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2018-17454 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2019-5486 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2025-66570

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTEADDR, REMOTEPORT,...

CVE-2025-66570

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTEADDR, REMOTEPORT,...

CVE-2025-66549

Nextcloud Desktop is the desktop sync client for Nextcloud. Prior to 3.16.5, when trying to manually lock a file inside an end-to-end encrypted directory, the path of the file was sent to the server unencrypted, making it possible for administrators to see it in log files. This vulnerability is...

SUSE CVE-2025-66287

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

CVE-2025-66031 affecting package reaper for versions less than 3.1.1-21

CVE-2025-66031 affecting package reaper for versions less than 3.1.1-21. A patched version of the package is available...

CVE-2020-7712 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2025-31133 affecting package kubernetes for versions less than 1.30.10-15

CVE-2025-31133 affecting package kubernetes for versions less than 1.30.10-15. A patched version of the package is available...

CVE-2025-66287

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

CVE-2025-66516

Critical XXE in Apache Tika tika-core 1.13-3.2.1, tika-pdf-module 2.0.0-3.2.1 and tika-parsers 1.13-1.28.5 modules on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. This CVE covers the same vulnerability as in CVE-2025-54988...

CVE-2025-40251

In the Linux kernel, the following vulnerability has been resolved: devlink: rate: Unset parent pointer in devlratenodesdestroy The function devlratenodesdestroy is documented to "Unset parent for all rate objects". However, it was only calling the driver-specific rateleafparentset or...

CVE-2025-40258

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race condition in mptcpschedulework syzbot reported use-after-free in mptcpschedulework 1 Issue here is that mptcpschedulework schedules a work, then gets a refcount on sk-skrefcnt if the work was scheduled. This...