GHSA-6FHJ-CGMM-XFX6 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-cng-fips, gitlab-rails-ce-fips...

GHSA-86R3-Q889-HVG2 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-cng-fips, gitlab-rails-ce-fips...

GHSA-G9G2-QC64-JGCJ vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-cng-fips, gitlab-rails-ce-fips...

CVE-2025-14562 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-cng-fips, gitlab-rails-ce-fips...

CVE-2026-14341 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-cng-fips, gitlab-rails-ce-fips...

CVE-2026-14351 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-cng-fips, gitlab-rails-ce-fips...

CVE-2026-3093 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-cng-fips, gitlab-rails-ce-fips...

CVE-2026-4672 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-cng-fips, gitlab-rails-ce-fips...

CVE-2026-6267 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-cng-fips, gitlab-rails-ce-fips...

GHSA-2RC9-8CX9-FXPR vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-cng-fips, gitlab-rails-ce-fips...

CVE-2026-6336 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-cng-fips, gitlab-rails-ce-fips...

GHSA-45H8-QRQH-XR5V vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-cng-fips, gitlab-rails-ce-fips...

GHSA-94P8-87FF-W336 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-cng-fips, gitlab-rails-ce-fips...

JLSEC-2026-1138 Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer...

Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgorithm field is define...

JLSEC-2026-1142 Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer...

Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim's p and g parameters, a forged q = r a small prime factor of the cofacto...

JLSEC-2026-1155 Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in...

Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In...

co.elastic.apm:apm-agent-attach-cli (>=1.26.0, <=1.57.0), com.adobe.documentservices:pdfservices-sdk (>=2.2.2, <=3.5.1) +179 more potentially affected by CVE-2026-13506 via org.bouncycastle:bc-fips (>=1.0.1, <=1.0.2.6)

org.bouncycastle:bc-fips MAVEN version =1.0.1, =1.26.0, =2.2.2, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.17.4.1 and more Source cves: CVE-2026-13506 Source advisory:...

com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.16.0, <=4.0.11.0), com.ascentstream.pulsar:pulsar-package-bookkeeper-storage (>=3.0.18.0, <=4.0.11.0) +20 more potentially affected by CVE-2026-13506 via org.bouncycastle:bc-fips (>=2.0.0, <=2.0.1)

org.bouncycastle:bc-fips MAVEN version =2.0.0, =3.0.16.0, =3.0.18.0, =9.0.0, =4.0.7.1, =4.0.7.1, =3.0.15, =3.0.17, =3.22.0, =26.0.0, =3.0.0-beta1, =3.0.0-beta1, =3.0.0 and more Source cves: CVE-2026-13506 Source advisory: GHSA-QP49-QGX5-5M26...

com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.16.0, <=4.0.11.0), com.ascentstream.pulsar:pulsar-package-bookkeeper-storage (>=3.0.18.0, <=4.0.11.0) +20 more potentially affected by CVE-2026-13506 via org.bouncycastle:bc-fips (>=2.0.0, <=2.0.1)

org.bouncycastle:bc-fips MAVEN version =2.0.0, =3.0.16.0, =3.0.18.0, =9.0.0, =4.0.7.1, =4.0.7.1, =3.0.15, =3.0.17, =3.22.0, =26.0.0, =3.0.0-beta1, =3.0.0-beta1, =3.0.0 and more Source cves: CVE-2026-13506 Source advisory: OSV:GHSA-QP49-QGX5-5M26...

co.elastic.apm:apm-agent-attach-cli (>=1.26.0, <=1.57.0), com.adobe.documentservices:pdfservices-sdk (>=2.2.2, <=3.5.1) +179 more potentially affected by CVE-2026-13506 via org.bouncycastle:bc-fips (>=1.0.1, <=1.0.2.6)

org.bouncycastle:bc-fips MAVEN version =1.0.1, =1.26.0, =2.2.2, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.16.8.0, =4.17.4.1 and more Source cves: CVE-2026-13506 Source advisory:...