CVE-2024-32002

CVE-2024-32002 A Reverse shell generator for gitlab-shell vulnerability cve 2024-32002 This is still in the testing phase and I will update it once done...

CLEANSTART-2026-EL80803 Security fix for CVE-2024-10041 applied in: gitlab-shell 14.45.5-r0, gitlab-shell-fips 14.45.5-r0

CVE-2024-10041 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UX00872 Security fixes in gitlab-shell-fips 14.45.5-r0

Package gitlab-shell-fips version 14.45.5-r0 fixes 3 vulnerabilities: CVE-2024-10041, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-AX77726 vulnerability was found in PAM

Multiple security vulnerabilities affect the gitlab-shell-fips package. A vulnerability was found in PAM. See references for individual vulnerability details...

CVE-2021-22254

Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...

EUVD-2021-9323

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-22177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via...

CVE-2021-22177

Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...

GHSA-V6V8-XJ6M-XWQH vulnerabilities

Vulnerabilities for packages: buildkitd, rabbitmq-messaging-topology-operator, opentelemetry-collector-contrib, crossplane-provider-azure-sql, slsa-verifier, aactl, fulcio, kubevela, k3s, opentelemetry-collector, terragrunt, goreleaser, bank-vaults, terraform, flux, flux-image-reflector-controlle...

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: buildkitd, rabbitmq-messaging-topology-operator, opentelemetry-collector-contrib, crossplane-provider-azure-sql, slsa-verifier, aactl, fulcio, kubevela, k3s, opentelemetry-collector, terragrunt, goreleaser, bank-vaults, terraform, flux, flux-image-reflector-controlle...

BIT-GITLAB-2021-22177

Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: bom, prometheus-alertmanager, atlantis, prometheus-statsd-exporter, trust-manager, zot, apko, flux-image-reflector-controller, kubeflow-katib, flux-image-automation-controller, prometheus-pushgateway-fips, flux-kustomize-controller, aactl,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, gitness, nghttp2, kaf, nodetaint, kubeflow, kubeflow-katib, pulumi-language-java, skaffold, amass, nginx-mainline, src, terraform-provider-azurerm, rqlite, helm, dynamic-localpv-provisioner, kubernetes-csi-livenessprobe, kubescape,...

UBUNTU-CVE-2021-22254

Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...

CVE-2021-22254

Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...

CVE-2021-22254

Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...

CVE-2021-22254: Improper Encoding or Escaping of Output

Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...

GitLab security vulnerabilities

GitLab is a self-hosted, Git version control system project repository application developed in Ruby on Rails by GitLab, Inc. The application can be used to access a project's file content, commit history, bug list, etc. A security vulnerability exists in Gitlab, which stems from the product's la...

CVE-2021-22177

Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...

CVE-2021-22177

Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...