GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-policyinsights, kyverno-policy-reporter-plugins-kyverno-fips, crossplane-provider-aws-iam, frankenphp-8.4, crossplane-provider-azure-synapse, etcd, pulumi-language-java, chainloop-cli, crossplane-provider-aws-wafv2,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-policyinsights, kyverno-policy-reporter-plugins-kyverno-fips, crossplane-provider-aws-iam, frankenphp-8.4, crossplane-provider-azure-synapse, etcd, pulumi-language-java, chainloop-cli, crossplane-provider-aws-wafv2,...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

CLEANSTART-2026-XN20660 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CH77232 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: redka, kafka-proxy, terraform-provider-tls, crossplane-provider-aws-elasticache, falco-no-driver, secrets-store-csi-driver-provider-aws, tfsec, mattermost, cerbos, tempo, sftpgo-plugin-eventsearch, oauth2-proxy, bank-vaults, opentofu, steampipe, dask-gateway, kserve,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: redka, kafka-proxy, terraform-provider-tls, crossplane-provider-aws-elasticache, falco-no-driver, secrets-store-csi-driver-provider-aws, tfsec, mattermost, cerbos, tempo, sftpgo-plugin-eventsearch, oauth2-proxy, bank-vaults, opentofu, steampipe, dask-gateway, kserve,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: redka, stakater-reloader, sealed-secrets, bank-vaults, local-static-provisioner, newrelic-nri-statsd, kustomize, clickhouse-operator, docker-cli, cert-manager, sftpgo-plugin-geoipfilter, sops, bom, polaris, gitlab-pages, nvidia-container-toolkit,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: redka, stakater-reloader, sealed-secrets, bank-vaults, local-static-provisioner, newrelic-nri-statsd, kustomize, clickhouse-operator, docker-cli, cert-manager, sftpgo-plugin-geoipfilter, sops, bom, polaris, gitlab-pages, nvidia-container-toolkit,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: redka, stakater-reloader, sealed-secrets, bank-vaults, local-static-provisioner, render-template, newrelic-nri-statsd, kustomize, clickhouse-operator, docker-cli, cert-manager, sftpgo-plugin-geoipfilter, sops, bom, polaris, gitlab-pages, nvidia-container-toolkit,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, kyverno-policy-reporter-plugins-kyverno-fips, crossplane-provider-aws-iam, terraform-provider-time, amazon-ecs-agent-fips, grafana-pyroscope, etcd, rancher-system-upgrade-controller-fips, consul-k8s-fips, oauth2-proxy-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, kyverno-policy-reporter-plugins-kyverno-fips, crossplane-provider-aws-iam, terraform-provider-time, amazon-ecs-agent-fips, grafana-pyroscope, etcd, oauth2-proxy-fips, pulumi-language-java, crossplane-provider-aws-s3-fips,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, kyverno-policy-reporter-plugins-kyverno-fips, crossplane-provider-aws-iam, terraform-provider-time, amazon-ecs-agent-fips, grafana-pyroscope, etcd, rancher-system-upgrade-controller-fips, consul-k8s-fips, oauth2-proxy-fips,...