CVE-2026-6269 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to modify hidden merge requests due to incorrect...

CVE-2026-7250 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper input validation in the API request...

CVE-2026-47241 vulnerabilities

Vulnerabilities for packages: truffleruby, ruby3.4-rails, jruby, gitlab-rails-ce, logstash, ruby3.2-rails, kube-fluentd-operator, logstash-fips, ruby3.3-rails, ruby4.0-rails, kube-logging-operator, gitlab-rails-ce-fips...

GHSA-C4FP-CXRR-MJ66 vulnerabilities

Vulnerabilities for packages: truffleruby, ruby3.4-rails, jruby, gitlab-rails-ce, logstash, ruby3.2-rails, kube-fluentd-operator, logstash-fips, ruby3.3-rails, ruby4.0-rails, kube-logging-operator, gitlab-rails-ce-fips...

GHSA-46Q3-7GV7-QMGG vulnerabilities

Vulnerabilities for packages: truffleruby, ruby3.4-rails, jruby, gitlab-rails-ce, logstash, ruby3.2-rails, kube-fluentd-operator, logstash-fips, ruby3.3-rails, ruby4.0-rails, kube-logging-operator, gitlab-rails-ce-fips...

GHSA-8P34-64R3-MWG8 vulnerabilities

Vulnerabilities for packages: truffleruby, ruby3.4-rails, jruby, gitlab-rails-ce, logstash, ruby3.2-rails, kube-fluentd-operator, logstash-fips, ruby3.3-rails, ruby4.0-rails, kube-logging-operator, gitlab-rails-ce-fips...

CVE-2026-9694: Improper Neutralization of Substitution Characters

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions, could have allowed an unauthenticated user to impersonate the GitLab Support Bot and inject arbitrary content via a specially...

CVE-2026-9204: Server-Side Request Forgery (SSRF)

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to read arbitrary files from the Gitaly server and access internal network resources...

CVE-2026-7250: Allocation of Resources Without Limits or Throttling

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper input validation in the API request...

Fedora 45 : singularity-ce (2026-d32912dc74)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d32912dc74 advisory. Automatic update for singularity-ce-4.4.2-1.fc45. Changelog Wed Jun 10 2026 David Trudgian - 4.4.2-1 - Upgrade to 4.4.2 upstream version. - Fix...

CVE-2026-47737 vulnerabilities

Vulnerabilities for packages: gitlab-cng, gitlab-rails-ce, logstash, logstash-fips, gitlab-rails-ce-fips...

CVE-2026-47736 vulnerabilities

Vulnerabilities for packages: gitlab-cng, gitlab-rails-ce, logstash, logstash-fips, gitlab-rails-ce-fips...

AZL-89664 CVE-2026-46303 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rockcontinue reads rs-contextent verbatim from the Rock Ridge CE record and passes it to sbbread without checking that the block number is within the mounted I...

CVE-2026-46303

The CVE-2026-46303 vulnerability affects the Linux kernel isofs Rock Ridge CE handling. rock_continue() could use rs->cont_extent without validating the block number, allowing potential reads of data from an adjacent filesystem via sb_bread() on crafted ISO mounts. The issue was addressed by p...

Linux Kernel Security Vulnerabilities

The Linux kernel is the kernel used by the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of verification of volume sizes during the Rock Ridge CE extension in isofs. This...

PT-2026-47374

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified openSUSE Tumbleweed versions prior to kernel-devel-7.0.12-1.1 Description The rock continue function in the isofs component reads the rs-cont extent from the Rock Ridge CE record and passes it to sb...

CVE-2026-46303: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rockcontinue reads rs-contextent verbatim from the Rock Ridge CE record and passes it to sbbread without checking that the block number is within the mounted I...

CVE-2026-3254

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that under certain conditions could have allowed an authenticated user to load unauthorized content into another user's browser due to improper input validation in the Mermaid sandbox...

ROS-20260605-73-0022

The vulnerability in Portainer-Ce is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260605-73-0020

The vulnerability in Portainer-Ce relates to the disclosure of information through query strings. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...