455 matches found
Gitlab -- vulnerabilities
Gitlab reports: Cross-site Scripting issue in Markdown placeholder processing impacts GitLab CE/EE Denial of Service issue in GraphQL API impacts GitLab CE/EE Denial of Service issue in repository archive endpoint impacts GitLab CE/EE Denial of Service issue in protected branches API impacts GitL...
AI Bot Hackerbot-Claw Targets Microsoft, DataDog and CNCF GitHub Repos
Security firm Pillar reveals the Chaos Agent in which Hackerbot-Claw, an AI agent, used natural language to compromise major GitHub projects and hijack developer tools...
GHSA-9H8M-3FM2-QJRQ vulnerabilities
Vulnerabilities for packages: spicedb-operator, terragrunt-fips, kapp-controller-fips, cass-operator-fips, trillian-fips, restic-fips, teleport-operator-fips, ceph-csi-operator, falcoctl, kubevela-fips, fluent-operator, aws-otel-collector, skaffold-fips, docker-fips, metrics-server-fips, kine,...
CVE-2026-27896 vulnerabilities
Vulnerabilities for packages: datadog-agent, jaeger, osv-scanner, ferretdb, github-mcp-server, opencost, gptscript...
GHSA-WVJ2-96WP-FQ3F vulnerabilities
Vulnerabilities for packages: datadog-agent, jaeger, osv-scanner, ferretdb, github-mcp-server, opencost, gptscript...
CVE-2026-27896 vulnerabilities
Vulnerabilities for packages: ferretdb, jaeger, github-mcp-server, opencost-fips, datadog-agent-fips, gitlab-workhorse-ce, flux-operator, osv-scanner, flux-operator-fips, gitlab-workhorse-ce-fips, opencost, gptscript, jaeger-fips, datadog-agent...
GHSA-WVJ2-96WP-FQ3F vulnerabilities
Vulnerabilities for packages: ferretdb, jaeger, github-mcp-server, opencost-fips, datadog-agent-fips, gitlab-workhorse-ce, flux-operator, osv-scanner, flux-operator-fips, gitlab-workhorse-ce-fips, opencost, gptscript, jaeger-fips, datadog-agent...
CVE-2026-26007 vulnerabilities
Vulnerabilities for packages: pgadmin4, airflow-core, dbt-bigquery, gitlab-cng-fips, kubeflow-pipelines-visualization-server, k8s-sidecar, prefect, superset, authentik, opal, datadog-agent, localstack, nemo, openstack-kolla-toolbox-2025.1, ggshield, awx, kubeflow-jupyter-web-app,...
GHSA-R6PH-V2QM-Q3C2 vulnerabilities
Vulnerabilities for packages: pgadmin4, airflow-core, dbt-bigquery, gitlab-cng-fips, kubeflow-pipelines-visualization-server, k8s-sidecar, prefect, superset, authentik, opal, datadog-agent, localstack, nemo, openstack-kolla-toolbox-2025.1, ggshield, awx, kubeflow-jupyter-web-app,...
CVE-2025-11065 vulnerabilities
Vulnerabilities for packages: jitsucom-bulker, bank-vaults...
CVE-2025-11065 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws-fips, gitlab-cng-fips, mattermost-fips, kyverno, boring-registry-fips, grafana, tkn-fips, jitsucom-bulker, rancher-security-scan, neuvector-sigstore-interface-fips, beats-fips, istio-fips, docker-compose-fips, beats, ratify-fips, grafana-fips,...
CVE-2026-23949 vulnerabilities
Vulnerabilities for packages: superset, datadog-agent, dask-kubernetes, kserve, open-webui, emissary, mlflow, py3-setuptools, pypy-3.10, pypy-3.11, py3-cassandra-medusa, kubeflow-katib, semgrep, airflow, kubeflow-jupyter-web-app...
CVE-2026-23949 vulnerabilities
Vulnerabilities for packages: pgadmin4, dbt-bigquery, kubeflow-katib, tensorflow-gpu-jupyter, superset, tensorflow-cpu-jupyter, authentik, opal, localstack, datadog-agent, nemo, ansible-operator, awx, kubeflow-jupyter-web-app, request-1276, spamcheck, pypy-3.11, azure-functions-python-worker,...
CVE-2026-22771 vulnerabilities
Vulnerabilities for packages: datadog-agent...
GHSA-XRWG-MQJ6-6M22 vulnerabilities
Vulnerabilities for packages: datadog-agent...
CVE-2026-22771 vulnerabilities
Vulnerabilities for packages: datadog-agent, tigera-operator, datadog-agent-fips...
GHSA-XRWG-MQJ6-6M22 vulnerabilities
Vulnerabilities for packages: datadog-agent, tigera-operator, datadog-agent-fips...
CVE-2021-22260
A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker to execute arbitrary JavaScript code on the...