274 matches found
CVE-2021-22192
CVE-2021-22192 CVE-2021-22192 靶场： 未授权用户 RCE 漏洞 0x10 靶场环境 0x20 目录结构 CVE-2021-22192 ├── README.md ............... 此 README 说明 ├── imgs .................... 辅助 README 说明的图片 ├── gitlab .................. Gitlab 容器的挂载目录 │ ├── Dockerfile .......... Gitlab 的 Docker 构建文件 │ ├── config .............. Gitla...
LeitWacht
GitLab Runner Leitwacht 用于 GitLab Runner CI/CD 容器的网络出口强制工具。Leitwacht 通过控制每个作业容器可以访问的网络来防止供应链攻击泄露秘密。 工作原理 Leitwacht 是一个独立的代理程序，与 GitLab Runner 一起在每个节点上运行。它拦截容器启动事件，附加执行原语，并将所有网络活动报告给中央后端。无需修改 GitLab Runner。 强制栈（每个容器） Container Process | | DNS 查询 端口 53 v nftables 重定向 ── DNS 代理 :15353 | |── 白名单检查（FQ...
LeitWacht
GitLab Runner Leitwacht Network egress enforcement for GitLab Runner CI/CD containers. Leitwacht prevents supply chain attacks from exfiltrating secrets by controlling what each job container can access on the network. How It Works Leitwacht is a standalone agent that runs alongside GitLab Runner...
LeitWacht Agent
leitwacht-agent https://leitwacht.eu — source of truth: https://gitlab.com/leitwacht/leitwacht-agent. Issues, MRs, and discussions live on GitLab. Pre-1.0. The 0.x series is pre-stable; minor releases may carry breaking changes to APIs, env-var names, helm values.yaml keys, and rule-file schema...
CLEANSTART-2026-KS29431 Security fix for CVE-2026-32285 applied in: gitlab-runner 18.11.1-r0, grafana-alloy 1.13.1-r1, kubevela 1.10.8-r0, prometheus 3.11.0-r0, tempo 2.10.3-r0, tempo 2.9.1-r1, tempo-fips 2.10.3-r0, tempo-fips 2.9.1-r1, terragrunt-fips 0.94.0-r3, terragrunt-fips 0.95.1-r3, terragrunt-fips 0.96.1-r3, terragrunt-fips 0.98.0-r4
CVE-2026-32285 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
GHSA-F47W-MRG9-G9P2 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-pages, gitlab-runner-fips, gitlab-runner, gitlab-workhorse-ce...
CVE-2026-85706 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-pages, gitlab-runner-fips, gitlab-runner, gitlab-workhorse-ce...
GHSA-F47W-MRG9-G9P2 vulnerabilities
Vulnerabilities for packages: gitlab-pages, gitlab-runner...
CVE-2026-85706 vulnerabilities
Vulnerabilities for packages: gitlab-pages, gitlab-runner...
GO-2026-4514 vulnerabilities
Vulnerabilities for packages: nuclei, teleport, goreleaser, redpanda, lazygit, k3s, gitlab-runner, terragrunt, datadog-agent, witness, cri-tools, dgraph, tempo, kubevela, k8sgpt, vcluster, ollama, grafana-alloy, dagger, rclone, maru, loki, mcp-grafana, opentelemetry-collector, prometheus,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: nuclei, skaffold, steampipe, guac, snyk-cli, teleport, flux, cerbos, scorecard, pulumi-kubernetes-operator, rancher-fleet, argo-cd, gitlab-runner, witness, flux-source-controller, chezmoi, pulumi-language-dotnet, trivy, tfsec, argo-events, pulumi-language-yaml, kanik...
CVE-2026-14351 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-86R3-Q889-HVG2 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-3093 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-45H8-QRQH-XR5V vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-8JC8-CVQJ-P926 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-4672 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-6336 vulnerabilities
Vulnerabilities for packages: gitlab-runner...