GO-2026-5597 vulnerabilities

Vulnerabilities for packages: argo-cd, external-secrets-operator, telegraf, teleport, cerbos, gitaly, terragrunt, rclone, rancher-fleet, syft, scorecard...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: argo-cd, gogatekeeper, helm, steampipe, trivy, conftest, oras, grafana-operator, zot, rancher-agent, chartmuseum, k8ssandra-client, linkerd2, argocd-image-updater, gatekeeper, zarf, consul-k8s, ratify, cilium-cli, headlamp, opa-envoy, trivy-operator, helm-operator,...

GO-2026-5618 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater...

GO-2026-5751 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

GO-2025-4245 vulnerabilities

Vulnerabilities for packages: argo-cd, datadog-agent, opentelemetry-collector-contrib, kserve, kubeflow-pipelines, tempo, kargo, amazon-cloudwatch-agent, argo-rollouts, argo-workflows, grafana-alloy, vale, splunk-otel-collector, k8sgateway, nats, k8sgpt, kine, jaeger, coredns, aws-otel-collector,...

GO-2026-4971 vulnerabilities

Vulnerabilities for packages: argo-cd, contour, prometheus, cortex, falco-no-driver, kubernetes-csi-external-attacher, metacontroller, nuclei, cilium, trino, nerdctl, argo-events, grafana-operator, nova, grafana, otel-cli, pdfcpu, argo-workflows, nri-prometheus, nfpm, kubernetes-dashboard, dex,...

GO-2026-4976 vulnerabilities

Vulnerabilities for packages: argo-cd, go, prometheus-operator, telegraf, minio, prometheus, helm, datadog-agent, falco-no-driver, juicefs, kubernetes, cilium, kube-fluentd-operator, trino, hubble, nerdctl, fluent-bit-plugin-loki, zot, grafana, kubernetes-csi-node-driver-registrar, grafana-alloy,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argo-cd, prometheus, flux-kustomize-controller, crossplane-provider-aws-cloudfront, nuclei, cilium, traefik, crossplane-provider-aws-memorydb, chezmoi, nerdctl, sealed-secrets, argo-events, crossplane-provider-keycloak, pulumi-language-yaml,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: argo-cd, contour, prometheus, cortex, falco-no-driver, kubernetes-csi-external-attacher, nuclei, cilium, trino, nerdctl, argo-events, otel-cli, grafana, argo-workflows, kubernetes-dashboard, dex, aws-flb-firehose, grafana-pyroscope, cert-manager, cloud-sql-proxy,...

GHSA-P28V-F755-9QRG

creationtimestamp| type| source ---|---|--- 2026-08-13 21:32:39+00:00| seen| https://gist.github.com/alon710/9ad8f19dc4256e5aad5d6b3105b603da...

CVE-2026-58416 Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)

Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard...

Vulnerabilities managed in GitLab Enterprise Edition and Community Edition

GitLab has identified several vulnerabilities in its GitLab Enterprise Edition and Community Edition versions, ranging from 12.0 to 19.2.2. These vulnerabilities concern various aspects of GitLab, including incorrect privilege allocation, where users with pending membership statuses inadvertently...

CLEANSTART-2026-DT69250 Security fixes in argo-cd 3.4.5-r1

Package argo-cd version 3.4.5-r1 fixes 9 vulnerabilities: ghsa-jxpm-75mh-9fp7, ghsa-8xwf-rjm4-xvhv, ghsa-vh4v-2xq2-g5cg, ghsa-xf85-363p-868w, CVE-2026-50151...

CVE-2026-15423

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute CI/CD pipelines on a protected branch without...

CVE-2026-15423 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute CI/CD pipelines on a protected branch without...

CVE-2026-15423 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute CI/CD pipelines on a protected branch without...

EUVD-2026-57393

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute CI/CD pipelines on a protected branch without...

CVE-2026-15423 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute CI/CD pipelines on a protected branch without...

CVE-2026-15423

GitLab CE/EE (all supported branches) were vulnerable to an authorization flaw in pipeline reference validation that could let an authenticated user with developer-role permissions run CI/CD pipelines on a protected branch without requiring push permissions. Affected versions: 19.0 before 19.0.6,...

PT-2026-71198

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute CI/CD pipelines on a protected branch without...