227 matches found
CVE-2025-2615
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2, that could have allowed a blocked user to access sensitive information by establishing GraphQL subscriptions through WebSocket connections...
CVE-2025-6171
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker with reporter access to view branch names and pipeline details by accessing the packages API endpoint even wh...
CVE-2025-11990
GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses...
CVE-2025-31133 vulnerabilities
Vulnerabilities for packages: rancher, rancher-agent, node-feature-discovery, virt-handler, grafana-alloy, virt-launcher, k3s, rke2-runtime, sriov-network-device-plugin, kubernetes, grafana-alloy-fips, kubernetes-fips, sriov-network-device-plugin-fips, prometheus-podman-exporter, falco-no-driver,...
GHSA-CGRX-MC8F-2PRM vulnerabilities
Vulnerabilities for packages: blob-csi, volcano-fips, dagger, rke2-runtime-fips, rke2-runtime, google-osconfig-agent, skopeo, trivy-operator-fips, k8s-device-plugin-fips, neuvector-fips, zot, trivy-fips, k9s-fips, nerdctl-fips, k8s-device-plugin, wolfictl, trivy, cg, syft, amazon-k8s-cni-fips,...
GHSA-9493-H29P-RFM2 vulnerabilities
Vulnerabilities for packages: rancher, rancher-agent, node-feature-discovery, virt-handler, grafana-alloy, virt-launcher, k3s, rke2-runtime, sriov-network-device-plugin, kubernetes, grafana-alloy-fips, kubernetes-fips, sriov-network-device-plugin-fips, prometheus-podman-exporter, falco-no-driver,...
GHSA-QW9X-CQR3-WC7R vulnerabilities
Vulnerabilities for packages: rancher, rancher-agent, node-feature-discovery, grafana-alloy, k3s, rke2-runtime, sriov-network-device-plugin, kubernetes, grafana-alloy-fips, kubernetes-fips, sriov-network-device-plugin-fips, prometheus-podman-exporter, falco-no-driver, node-feature-discovery-fips,...
CVE-2025-52565 vulnerabilities
Vulnerabilities for packages: rancher, rancher-agent, node-feature-discovery, grafana-alloy, k3s, rke2-runtime, sriov-network-device-plugin, kubernetes, grafana-alloy-fips, kubernetes-fips, sriov-network-device-plugin-fips, prometheus-podman-exporter, falco-no-driver, node-feature-discovery-fips,...
CVE-2025-52881 vulnerabilities
Vulnerabilities for packages: blob-csi, volcano-fips, dagger, rke2-runtime-fips, rke2-runtime, google-osconfig-agent, skopeo, trivy-operator-fips, k8s-device-plugin-fips, neuvector-fips, zot, trivy-fips, k9s-fips, nerdctl-fips, k8s-device-plugin, wolfictl, trivy, cg, syft, amazon-k8s-cni-fips,...
CVE-2025-11702
GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects...
CVE-2025-6601
GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.3, and 18.5 before 18.5.1 that under certain conditions could have allowed authenticated users to gain unauthorized project access by exploiting the access request approval workflow...
CVE-2025-11447
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service condition by sending GraphQL requests with crafted JSON payloads...
CVE-2025-11989
GitLab has remediated an issue in GitLab EE affecting all versions from 17.6.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to execute unauthorized quick actions by including malicious commands in specific descriptions...
Debian dla-4332 : distro-info-data - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4332 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4332-1 [email protected] https://www.debian.org/lts/security/...
[SECURITY] [DLA 4332-1] distro-info-data database update
Debian LTS Advisory DLA-4332-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera October 14, 2025 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.51+deb11u10 This is a routine update of the distro-info-data database for Debian LTS users. It updates...
DLA-4332-1 distro-info-data - database update
Bulletin has no description...
distrobuilder-3.2-4.1 on GA media (moderate)
distrobuilder-3.2-4.1 on GA media Announcement ID: openSUSE-SU-2025:15616-1 Rating: moderate Cross-References: CVE-2025-47911 CVE-2025-58190 CVSS scores: CVE-2025-47911 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-47911 SUSE : 6.9...
CVE-2025-10004
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.12 to 18.2.8, 18.3 to 18.3.4, and 18.4 to 18.4.2 that could make the GitLab instance unresponsive or severely degraded by sending crafted GraphQL queries requesting large repository blobs...
