GHSA-86R3-Q889-HVG2 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce...

CVE-2026-6336 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce...

CVE-2025-14562 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce...

CVE-2026-14341 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce...

CVE-2026-4672 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce...

GHSA-94P8-87FF-W336 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce...

CVE-2026-66066 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, gitlab-rails-ce, gitlab-rails-ce-fips, pghero-fips, pghero...

GHSA-XR9X-R78C-5HRM vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, gitlab-rails-ce, gitlab-rails-ce-fips, pghero-fips, pghero...

CVE-2026-54603 vulnerabilities

Vulnerabilities for packages: ruby3.4-oauth2, ruby3.2-oauth2, gitlab-rails-ce, ruby3.3-oauth2, gitlab-rails-ce-fips, ruby4.0-oauth2...

CVE-2026-3093 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper...

CVE-2026-62424

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-42494

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-42495

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-42494

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

EUVD-2026-49773

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

EUVD-2026-49776

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

EUVD-2026-49774

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-42494

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-42495

CVE-2026-42495 affects the libfsimage iso9660 driver. The vulnerability stems from deriving several lengths directly from attacker-controlled on-disk fields without validation, with the System Use area calculation potentially underflowing. The connected documents do not provide explicit impact, e...

CVE-2026-42495 buffer overruns in libfsimage iso9660 handling

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...