CVE-2025-12697 Improper Encoding or Escaping of Output in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...

CVE-2025-12697 Improper Encoding or Escaping of Output in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...

CVE-2025-12697

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...

CVE-2025-12697 Improper Encoding or Escaping of Output in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...

CVE-2025-12697

GitLab CE/EE was affected by CVE-2025-12697. The issue could allow an authenticated user with maintainer permissions to reveal Datadog API credentials under certain conditions. Remediation has been applied in GitLab releases: 18.7.6 (for 15.5–18.7.x), 18.8.6, and 18.9.2, which address the vulnera...

Gitlab -- vulnerabilities

Gitlab reports: Cross-site Scripting issue in Markdown placeholder processing impacts GitLab CE/EE Denial of Service issue in GraphQL API impacts GitLab CE/EE Denial of Service issue in repository archive endpoint impacts GitLab CE/EE Denial of Service issue in protected branches API impacts GitL...

GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Vulnerabilities exist in versions prior to GitLab CE/EE 18.7.6, 18.8.6,...

PT-2026-24706

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...

AI Bot Hackerbot-Claw Targets Microsoft, DataDog and CNCF GitHub Repos

Security firm Pillar reveals the Chaos Agent in which Hackerbot-Claw, an AI agent, used natural language to compromise major GitHub projects and hijack developer tools...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, eck-operator-fips, ops-agent, etcd, teleport, cluster-api-helm-controller, volsync-fips, task-fips, fluent-bit-plugin-loki, opencost-fips, gatekeeper, kyverno-policy-reporter-plugins-kyverno, cluster-api-provider-vsphere,...

CVE-2026-27896 vulnerabilities

Vulnerabilities for packages: osv-scanner, ferretdb, opencost, github-mcp-server, jaeger, gptscript, datadog-agent...

GHSA-WVJ2-96WP-FQ3F vulnerabilities

Vulnerabilities for packages: osv-scanner, ferretdb, opencost, github-mcp-server, jaeger, gptscript, datadog-agent...

GHSA-WVJ2-96WP-FQ3F vulnerabilities

Vulnerabilities for packages: flux-operator-fips, jaeger, jaeger-fips, ferretdb, opencost-fips, flux-operator, opencost, datadog-agent, gitlab-workhorse-ce, datadog-agent-fips, osv-scanner, github-mcp-server, gitlab-workhorse-ce-fips, gptscript...

CVE-2026-27896 vulnerabilities

Vulnerabilities for packages: flux-operator-fips, jaeger, jaeger-fips, ferretdb, opencost-fips, flux-operator, opencost, datadog-agent, gitlab-workhorse-ce, datadog-agent-fips, osv-scanner, github-mcp-server, gitlab-workhorse-ce-fips, gptscript...

CVE-2026-26007 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, gitlab-cng, ggshield, dbt-snowflake, pgadmin4, kubeflow-pipelines, authentik, mitmproxy, barman, request-1276, jupyter-base-notebook, semgrep, litellm, awx, ansible-operator-fips, airflow, mlflow, kubeflow-jupyter-web-app, py3-cassandra-medusa,...

GHSA-R6PH-V2QM-Q3C2 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, gitlab-cng, ggshield, dbt-snowflake, pgadmin4, kubeflow-pipelines, authentik, mitmproxy, barman, request-1276, jupyter-base-notebook, semgrep, litellm, awx, ansible-operator-fips, airflow, mlflow, kubeflow-jupyter-web-app, py3-cassandra-medusa,...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: bank-vaults, jitsucom-bulker...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, beats, tkn-fips, neuvector-sigstore-interface-fips, zitadel, rancher-security-scan, kyverno, kyverno-notation-aws-fips, k9s-fips, pluto-fips, bank-vaults, mattermost-fips, boring-registry-fips, grafana, grafana-fips, istio-fips, beats-fips,...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: pypy-3.10, kubeflow-jupyter-web-app, kubeflow-katib, dask-kubernetes, py3-cassandra-medusa, airflow, open-webui, pypy-3.11, py3-setuptools, mlflow, semgrep, superset, emissary, kserve, datadog-agent...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: authentik-fips, duplicity, pgadmin4, wazuh-manager-fips, authentik, request-1276, tensorflow-cpu-jupyter, tensorflow-gpu-jupyter, semgrep, awx, airflow, azure-functions-python-worker, mlflow, kubeflow-jupyter-web-app, py3-cassandra-medusa, spamcheck, opal,...