GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elb-fips, zarf, kyverno-policy-reporter-plugins-kyverno-fips, crossplane-provider-aws-s3-fips, skaffold-fips, kyverno, omnictl-multiarch-fips, gitlab-rails-ce, livekit-cli, mattermost, rancher-agent, crossplane-provider-aws-scheduler,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elb-fips, zarf, kyverno-policy-reporter-plugins-kyverno-fips, crossplane-provider-aws-s3-fips, skaffold-fips, kyverno, omnictl-multiarch-fips, gitlab-rails-ce, livekit-cli, mattermost, rancher-agent, crossplane-provider-aws-scheduler,...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

CLEANSTART-2026-CH77232 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, steampipe, wgcf, redpanda, bank-vaults, loki, nri-mssql, mcp-grafana, opentelemetry-collector, step, cri-tools, github-mcp-server, knative-client, kubecolor, kind, gitleaks, langfuse, tailscale, stakater-reloader,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, steampipe, wgcf, redpanda, bank-vaults, loki, nri-mssql, mcp-grafana, opentelemetry-collector, step, cri-tools, github-mcp-server, knative-client, kind, gitleaks, langfuse, tailscale, blobfuse2, stakater-reloader,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, steampipe, wgcf, redpanda, bank-vaults, loki, nri-mssql, mcp-grafana, opentelemetry-collector, step, cri-tools, github-mcp-server, knative-client, kubecolor, kind, gitleaks, langfuse, tailscale, stakater-reloader,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: steampipe, skopeo, sops, terraform-provider-grafana, redpanda, bank-vaults, loki, kubernetes-csi-driver-nfs, wal-g, containerd, bom, crossplane-provider-aws-rds, dkron, cluster-api-gcp-controller, dex, mcp-grafana, kubernetes-csi-node-driver-registrar, azuredisk-csi,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: steampipe, skopeo, sops, terraform-provider-grafana, redpanda, bank-vaults, loki, kubernetes-csi-driver-nfs, wal-g, containerd, bom, crossplane-provider-aws-rds, dkron, cluster-api-gcp-controller, dex, mcp-grafana, kubernetes-csi-node-driver-registrar, azuredisk-csi,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis-fips, rabbitmq-cluster-operator-fips, nri-jmx, minify-fips, image-factory-fips, cloud-provider-gcp-cloud-controller-manager-fips, zarf, k8s-driver-manager, kyverno-policy-reporter-plugins-kyverno-fips, prometheus-beat-exporter-fips,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis-fips, rabbitmq-cluster-operator-fips, nri-jmx, minify-fips, image-factory-fips, cloud-provider-gcp-cloud-controller-manager-fips, zarf, k8s-driver-manager, kyverno-policy-reporter-plugins-kyverno-fips, prometheus-beat-exporter-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis-fips, image-factory-fips, cloud-provider-gcp-cloud-controller-manager-fips, zarf, kyverno-policy-reporter-plugins-kyverno-fips, amazon-cloudwatch-agent-operator, crossplane-provider-aws-s3-fips, skaffold-fips, kyverno, authservice, gitlab-rails-ce,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: wgcf, bank-vaults, loki, nri-mssql, vcluster, mcp-grafana, step, cri-tools, github-mcp-server, knative-client, malcontent, cert-manager-csi-driver, kind, ip-masq-agent, opa-envoy, crossplane-provider-azure-managedidentity, gitleaks, langfuse, tailscale,...