GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: prometheus, crossplane-provider-aws-ec2-fips, crossplane-provider-aws-kms-fips, crossplane-provider-aws-redshiftserverless-fips, crossplane-provider-aws-scheduler-fips, helmfile, cilium-cli, drone-fips, gitlab-rails-ce, crossplane-provider-aws-route53-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: prometheus, crossplane-provider-aws-ec2-fips, crossplane-provider-aws-kms-fips, crossplane-provider-aws-redshiftserverless-fips, crossplane-provider-aws-scheduler-fips, helmfile, cilium-cli, drone-fips, gitlab-rails-ce, crossplane-provider-aws-route53-fips,...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

CLEANSTART-2026-XN20660 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CH77232 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, kubernetes-dashboard-metrics-scraper, croc, knative-operator, mariadb-operator, argo-rollouts, karma, delve, nvidia-container-toolkit, lvm-driver, vale, kind, portieris, syft, nri-kafka, yunikorn-web, rancher-helm,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, trillian, bank-vaults, restic, opentelemetry-collector-contrib, cadvisor, conftest, knative-operator, step-issuer, memcached-exporter, redpanda, mariadb-operator, argo-rollouts, karma, net-kourier, kyverno-policy-reporter-ui,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, trillian, bank-vaults, restic, opentelemetry-collector-contrib, cadvisor, conftest, knative-operator, step-issuer, memcached-exporter, redpanda, mariadb-operator, argo-rollouts, karma, net-kourier, kyverno-policy-reporter-ui,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, kubernetes-dashboard-metrics-scraper, croc, knative-operator, mariadb-operator, argo-rollouts, karma, delve, nvidia-container-toolkit, lvm-driver, vale, kind, portieris, syft, nri-kafka, yunikorn-web, rancher-helm,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, kubernetes-dashboard-metrics-scraper, croc, knative-operator, mariadb-operator, argo-rollouts, karma, delve, nvidia-container-toolkit, lvm-driver, vale, kind, portieris, syft, nri-kafka, yunikorn-web, rancher-helm,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: authentik, prometheus, crossplane-provider-aws-ec2-fips, kube-bench, docker-credential-acr-env-fips, newrelic-infrastructure-agent, gops-fips, nri-couchbase-fips, wavefront-collector-for-kubernetes, crossplane-provider-aws-kms-fips, longhorn-backing-image-manager,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: authentik, prometheus, crossplane-provider-aws-ec2-fips, newrelic-infrastructure-agent, crossplane-provider-aws-kms-fips, longhorn-backing-image-manager, kyverno-policy-reporter-kyverno-plugin-fips, sftpgo-plugin-geoipfilter, grafana-mimir-fips, k6-fips, trillian-fip...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: authentik, prometheus, crossplane-provider-aws-ec2-fips, kube-bench, docker-credential-acr-env-fips, newrelic-infrastructure-agent, nri-couchbase-fips, wavefront-collector-for-kubernetes, crossplane-provider-aws-kms-fips, longhorn-backing-image-manager,...