GHSA-9XW5-W5JJ-PVCG vulnerabilities

Vulnerabilities for packages: commercial-gitlab-cng-ee, commercial-gitlab-cng-ee-fips, kserve, litellm-fips, py3.13-scanner-test-libraries-aiohttp, metaflow-service...

CVE-2026-111066 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-cng-ee, commercial-gitlab-cng-ee-fips, kserve, litellm-fips, py3.13-scanner-test-libraries-aiohttp, metaflow-service...

CVE-2026-111750 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-cng-ee, commercial-gitlab-cng-ee-fips, kserve, litellm-fips, py3.13-scanner-test-libraries-aiohttp, metaflow-service...

CVE-2026-111749 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-cng-ee, commercial-gitlab-cng-ee-fips, kserve, litellm-fips, py3.13-scanner-test-libraries-aiohttp, metaflow-service...

CVE-2026-111065 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-cng-ee, commercial-gitlab-cng-ee-fips, kserve, litellm-fips, py3.13-scanner-test-libraries-aiohttp, metaflow-service...

CVE-2026-111748 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-cng-ee, commercial-gitlab-cng-ee-fips, kserve, litellm-fips, py3.13-scanner-test-libraries-aiohttp, metaflow-service...

CVE-2026-85706

CVE-2026-85706 GitLab unauthenticated arbitrary file read ★ CVE-2026-85706 GitLab unauthenticated arbitrary file read PoC ★ https://github.com/user-attachments/assets/026749ec-04e9-4dd5-9453-cb7c1f6e823d Overview CVE-2026-85706 is an unauthenticated arbitrary file read in GitLab CE/EE CVSS 10.0,...

CVE-2022-2992

CVE-2022-2992 Authenticated Remote Command Execution in Gitlab via GitHub import. A vulnerability in GitLab CE/EE affecting all versions from 11.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. allows an authenticated user to achieve...

PT-2026-120800

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 7.0 through 18.11.12 GitLab CE/EE versions 19.0 through 19.0.9 GitLab CE/EE versions 19.1 through 19.1.8 GitLab CE/EE versions 19.2 through 19.2.8 GitLab CE/EE versions 19.3 through 19.3.5 GitLab CE/EE versions 19.4 throu...

GitLab-CVE-2021-22205-

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Affected Version Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

CVE-2026-19478

CVE-2026-19478 GitLab GraphQL unauthenticated project deletion ★ CVE-2026-19478 GitLab GraphQL @glintroduced unauthenticated arbitrary-method-invocation PoC ★ https://github.com/user-attachments/assets/bb5d5f8a-a9bf-4148-854b-14c25c501d4b Overview CVE-2026-19478 is an unauthenticated...

CVE-2020-17533

Recently, a remote code execution vulnerability was discovered in Apache Struts2 CVE ID: CVE-2020-17530. The Apache Struts2 framework is a web framework for developing Java EE web applications. It is widely used, thus the threat impact scope is large. 2. Vulnerability Description If developers...

CVE-2023-2825

CVE-2023-2825 On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition CE and Enterprise Edition EE version 16.0.0. The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug...

CVE-2026-19478

-b91c1c?style=flat-square CVE-2026-19478 — Nuclei Template Non-destructive Nuclei detection template for CVE-2026-19478 , a critical CVSS 9.4 unauthenticated arbitrary method invocation flaw in the GitLab GraphQL API, patched by GitLab on August 17, 2026. TL;DR GitLab's GraphQL schema supports a...

CVE-2021-22205

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE /tmp/1.txt" batch scan python3...

CVE-2026-112091

A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. Impacted is an unknown function of the file delivery/checkfarmer.json.php of the component AJAX Endpoint. This manipulation of the argument fname causes...

CVE-2026-112090

A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqlirealescapestring of the file payment/pay.php. The manipulation of the argument fno/farmer results in sql injectio...

CVE-2026-112089

A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This vulnerability affects the function mysqliquery of the file employees/delete.php. The manipulation of the argument epayrollno leads t...

CVE-2026-112088

A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This affects the function mysqliquery of the file farmers/add.php. Executing a manipulation of the argument fno/fid/fname/flocallity/fac/fphone can...

CVE-2026-112091 Dav-ee dairy-management-system AJAX Endpoint checkfarmer.json.php information disclosure

A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. Impacted is an unknown function of the file delivery/checkfarmer.json.php of the component AJAX Endpoint. This manipulation of the argument fname causes...