Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure Detection

GitLab CE and EE 13.4 through 13.6.2 is susceptible to Information disclosure via GraphQL. User email is visible. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env python3 --...

PT-2026-65462

Name of the Vulnerable Software and Affected Versions Xen hypervisor libfsimage affected versions not specified Description A memory out-of-bounds read issue exists in the iso9660 driver of the libfsimage library. An attacker could exploit this flaw to achieve privilege escalation. Recommendation...

PT-2026-65465

This update for xen fixes the following issues: Update to version 4.20.3 jscPED-8907. Security issues fixed: - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling...

acdcserver (>=2.3.10rc8, <=2.4.5.8), aider-ce (>=0.87.2.dev9, <=0.87.3.dev4) +344 more potentially affected by CVE-2026-59939 via httplib2 (>=0.9.0, <=0.31.2)

httplib2 PYPI version =0.9.0, =2.3.10rc8, =0.87.2.dev9, =0.82.3, =0.1.0.dev19, =0.1.0, =0.2.0, =1.4.6, =0.1.0, =2021.2.5rc1, =2.11.0, =1.16.0, =2.3.0 and more Source cves: CVE-2026-59939 Source advisory: OSV:GHSA-J5G9-F88F-GFJ3...

a2grunnerp (>=0.1.0, <=0.1.8), acltoolkit-ad (0.2.2) +985 more potentially affected by CVE-2026-59886 via pyasn1 (>=0.1.7, <=0.6.3)

pyasn1 PYPI version =0.1.7, =0.1.0, =0.4.0, =0.1.1, =0.1.0, =0.4.0rc1, =0.0.2, =0.87.2.dev9, =0.82.3, =0.1.0.dev19, =0.1.0, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2026-59886 Source advisory: GHSA-HM4W-WWCW-MR6R...

GHSA-8X88-C5MF-7J5W vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips, lerna, kibana, prism, saf, homepage, graalvm, sqlpad, code-server, pulumi, gitlab-rails-ce, actions-runner, jupyter-base-notebook, wazuh-dashboard, kubeflow-centraldashboard, npm, wazuh-dashboard-fips,...

CVE-2026-54490 vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, arangodb, gitlab-rails-ce-fips...

GHSA-MP7J-QC5W-4988 vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, arangodb, gitlab-rails-ce-fips...

CVE-2025-12506 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner, gitlab-runner-fips...

GHSA-PGGX-2V9R-J6GM vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner, gitlab-runner-fips...

GHSA-H5PW-H3J7-CJ7F vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner, gitlab-runner-fips...

GHSA-M49F-RVV4-R4RV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner, gitlab-runner-fips...

a2grunnerp (>=0.1.0, <=0.1.8), acltoolkit-ad (0.2.2) +985 more potentially affected by CVE-2026-59884 via pyasn1 (>=0.1.7, <=0.6.3)

pyasn1 PYPI version =0.1.7, =0.1.0, =0.4.0, =0.1.1, =0.1.0, =0.4.0rc1, =0.0.2, =0.87.2.dev9, =0.82.3, =0.1.0.dev19, =0.1.0, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2026-59884 Source advisory: MEND:CVE-2026-59884...

ROS-20260713-73-0002

The vulnerability in Portainer-Ce is related to the incorrect implementation of the authentication algorithm. Exploiting this vulnerability allows an attacker who operates remotely to bypass security restrictions and gain unauthorized access to protected information...

1337x (1.2.5), 8a-scraper (>=0.0.2, <=0.0.4) +663 more potentially affected by CVE-2026-49477 via soupsieve (>=2.0.0, <=2.8.3)

soupsieve PYPI version =2.0.0, =0.0.2, =1.0.4, =0.1.3, =1.0.0, =0.4.0, =1.2.3, =0.2.0, =0.87.2.dev9, =0.24.0, =0.1.0.dev19, =1.3.0, =0.1.0, =1.3.0, =1.3.3 and more Source cves: CVE-2026-49477 Source advisory: OSV:GHSA-836R-79RF-4M37...

ROS-20260709-73-0025

The vulnerability in Portainer-CE is related to the execution of operations outside the buffer in memory. The vulnerability can be exploited remotely...

ROS-20260709-73-0028

The vulnerability in Portainer-Ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260709-73-0030

The vulnerability in Portainer-Ce is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...

acdcserver (>=2.3.10rc8, <=2.4.5.8), aider-ce (>=0.87.2.dev9, <=0.87.3.dev4) +344 more potentially affected by CVE-2026-59939 via httplib2 (>=0.9.0, <=0.31.2)

httplib2 PYPI version =0.9.0, =2.3.10rc8, =0.87.2.dev9, =0.82.3, =0.1.0.dev19, =0.1.0, =0.2.0, =1.4.6, =0.1.0, =2021.2.5rc1, =2.11.0, =1.16.0, =2.3.0 and more Source cves: CVE-2026-59939 Source advisory: SNYK:PYTHON-HTTPLIB2-17900545...

CVE-2026-7492 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.1 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an unauthenticated user to determine the existence of a private project due to improper authorization controls...