CVE-2026-7492 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.1 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an unauthenticated user to determine the existence of a private project due to improper authorization controls...

CVE-2026-40257

CVE-2026-40257 affects OP-TEE (Trusted Execution Environment) for Cortex-A with TrustZone. From versions 3.21.0 up to, but not including, 4.11.0, the ARM Crypto Extensions accelerated SHA-3 implementation has an off-by-one error that can cause a massive heap overflow, corrupting all TEE kernel me...

GHSA-Q675-QJ96-32M9 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb, mattermost-fips, seaweedfs-fips, seaweedfs-rocksdb-fips, seaweedfs-operator, seaweedfs, seaweedfs-operator-fips, gitlab-workhorse-ce...

GHSA-V62P-RQ8G-8H59 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

CVE-2025-6545 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

CVE-2025-6547 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

GHSA-H7CP-R72F-JXH6 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

GHSA-8452-54WP-RMV6 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

CVE-2025-8101 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

GHSA-95JQ-XPH2-CX9H vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb, opentelemetry-collector, frankenphp-8.4, spire-server, vault, external-dns, kyverno-fips, kine, argocd-image-updater, seaweedfs-rocksdb-fips, flux-source-controller, cilium-cli, etcd, argo-cd, flux-fips, prometheus-elasticsearch-exporter, zot,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb, opentelemetry-collector, frankenphp-8.4, spire-server, vault, external-dns, kyverno-fips, kine, argocd-image-updater, seaweedfs-rocksdb-fips, flux-source-controller, cilium-cli, etcd, argo-cd, flux-fips, prometheus-elasticsearch-exporter, zot,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb, splunk-otel-collector, opentelemetry-collector, dagger, frankenphp-8.4, docker, spire-server, longhorn-cli-fips, longhorn-manager-fips, vault, external-dns, kyverno-fips, redpanda-console, kine, argocd-image-updater, gatus-fips, act, apply-cve-bump...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, frankenphp-8.4, spire-server, vault, buildah, external-dns, kyverno-fips, kine, cilium-cli, buildah-fips, etcd, argo-cd, prometheus-elasticsearch-exporter, zot, external-secrets-operator, vault-fips, kube-conformance, reports-server, minio,...

CVE-2026-5796 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with Reporter-level group permissions to view package metadata from projects with the...

CVE-2024-1485 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

CVE-2026-54297 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-faraday, cinc-auditor, kube-fluentd-operator, gitlab-rails-ce, gitlab-rails-ce-fips, logstash, gitlab-cng, logstash-fips...

GHSA-98M9-HRRM-R99R vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-faraday, cinc-auditor, kube-fluentd-operator, gitlab-rails-ce, gitlab-rails-ce-fips, logstash, gitlab-cng, logstash-fips...

Fedora 43 : singularity-ce (2026-5358fb95a0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5358fb95a0 advisory. Upgrade to 4.4.2 upstream version. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Fedora 44 : singularity-ce (2026-63ae478575)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-63ae478575 advisory. Upgrade to 4.4.2 upstream version. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...