CVE-2026-2429

The Community Events plugin for WordPress is vulnerable to SQL Injection via the 'cevenuename' CSV field in the onsavechangesvenues function in all versions up to, and including, 1.5.8. This is due to insufficient escaping on the user-supplied CSV data and lack of sufficient preparation on the...

PT-2026-23814

The Community Events plugin for WordPress is vulnerable to SQL Injection via the 'ce venue name' CSV field in the on save changes venues function in all versions up to, and including, 1.5.8. This is due to insufficient escaping on the user-supplied CSV data and lack of sufficient preparation on t...

ROS-20260306-73-0011

A vulnerability in the sun8icecipherprepare function of the drivers/crypto/allwinner/sun8i-ce/sun8i-ce-cipher.c module of the Linux kernel is related to incorrect resource release. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2026-3206

Improper Resource Shutdown or Release vulnerability in KrakenD, SLU KrakenD-CE CircuitBreaker modules, KrakenD, SLU KrakenD-EE CircuitBreaker modules. This issue affects KrakenD-CE: before 2.13.1; KrakenD-EE: before 2.12.5...

CVE-2026-1649

The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cevenuename' parameter in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

CVE-2026-1649

The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cevenuename' parameter in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

CVE-2026-1649 Community Events <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ce_venue_name' Parameter

The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cevenuename' parameter in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

CVE-2026-1649 Community Events <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ce_venue_name' Parameter

The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cevenuename' parameter in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

GHSA-CF2V-M456-7QJF vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-pages-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce-fips...

GHSA-95P8-CCJW-3G7F vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-pages-fips, gitlab-runner, gitlab-rails-ce-fips...

CVE-2026-1458 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-pages-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce-fips...

CVE-2026-1456 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-pages-fips, gitlab-runner, gitlab-rails-ce-fips...

CVE-2026-2458

creationtimestamp| type| source ---|---|--- 2026-02-16 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/...

PT-2026-7516

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.7 through 18.7.3 GitLab CE/EE versions 18.8 through 18.8.3 Description An unauthenticated user could cause a denial of service through CPU exhaustion by submitting specially crafted markdown files. These files trigger...

Linux Distros Unpatched Vulnerability : CVE-2025-13978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.5 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowe...

CVE-2025-24293 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

GHSA-2V4G-65GF-W58F vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips...

CVE-2025-12653 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips...

GHSA-X8PR-QX2M-CR7G vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-rails-ce-fips...

GHSA-W2M4-XX67-836J vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-rails-ce-fips...