102 matches found
CVE-2026-92530 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-runner...
GHSA-WR3R-JHMC-F6JW vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-runner...
CVE-2026-92628 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-runner...
GHSA-C3RM-3HQR-4QWM vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-runner...
CVE-2026-92874 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-runner...
cve-2026-85706
CVE-2026-85706 — GitLab 未認証の任意ファイル読み取り CVSS 10.0 · 未認証 · 活発に悪用中 CISA KEV GitLab Workhorse Go リバースプロキシ と Puma/Grape Ruby の間のパーサー差異により、未認証の攻撃者が Workhorse の高速アップロードハンドオフをバイパスし、攻撃者が制御する file.path を持つ 3 つのアップロードエンドポイントに到達でき、GitLab ホスト上で 任意ファイル読み取り が可能になります。 files の 1 文字を %66iles としてエンコードすると、Workhorse...
GO-2026-5031 vulnerabilities
Vulnerabilities for packages: mattermost-fips, seaweedfs-operator-fips, gitlab-workhorse-ce, seaweedfs-rocksdb, seaweedfs, seaweedfs-fips, seaweedfs-operator, seaweedfs-rocksdb-fips...
GO-2026-5032 vulnerabilities
Vulnerabilities for packages: mattermost-fips, seaweedfs-operator-fips, gitlab-workhorse-ce, seaweedfs-rocksdb, seaweedfs, seaweedfs-fips, seaweedfs-operator, seaweedfs-rocksdb-fips...
GO-2026-5066 vulnerabilities
Vulnerabilities for packages: mattermost-fips, rclone, seaweedfs-operator-fips, gitlab-workhorse-ce, mattermost, seaweedfs, seaweedfs-fips, rclone-fips, hugo, listmonk, seaweedfs-operator...
GO-2026-5062 vulnerabilities
Vulnerabilities for packages: mailpit, mattermost-fips, rclone, seaweedfs-operator-fips, gitlab-workhorse-ce, hugo-fips, mattermost, seaweedfs-rocksdb, filebrowser, hugo-extended, seaweedfs, rclone-fips, hugo, seaweedfs-fips, listmonk, seaweedfs-operator, mailpit-fips, seaweedfs-rocksdb-fips...
GO-2026-4773 vulnerabilities
Vulnerabilities for packages: datadog-agent-fips, opencost, osv-scanner, gitlab-workhorse-ce, jaeger-fips, glab, flux-operator, flux-operator-fips, gitlab-workhorse-ce-fips, datadog-agent, jaeger, livekit-cli, opencost-fips, ferretdb...
GO-2026-4770 vulnerabilities
Vulnerabilities for packages: datadog-agent-fips, opencost, osv-scanner, gitlab-workhorse-ce, jaeger-fips, glab, flux-operator, flux-operator-fips, gitlab-workhorse-ce-fips, datadog-agent, jaeger, livekit-cli, opencost-fips, ferretdb...
GHSA-Q675-QJ96-32M9 vulnerabilities
Vulnerabilities for packages: mattermost-fips, seaweedfs-operator-fips, gitlab-workhorse-ce, seaweedfs-rocksdb, seaweedfs, seaweedfs-fips, seaweedfs-operator, seaweedfs-rocksdb-fips...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: falco-no-driver, omnictl-multiarch, knative-kafka-broker-fips, helm, grafana-fips, snyk-cli, trivy-operator, prometheus-elasticsearch-exporter, external-secrets-operator, rancher, opentofu, vault, argocd-image-updater, argo-workflows-fips, coder, grafana,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: aws-fsx-csi-driver-fips, cephcsi, langfuse-fips, smarter-device-manager, gpu-operator-fips, crossplane-provider-aws-lambda-fips, terraform-provider-sendgrid-fips, argocd-image-updater, istio-fips, falcoctl-fips, extism, atlantis, hcloud, amazon-k8s-cni-fips,...
CVE-2026-1182 vulnerabilities
Vulnerabilities for packages: gitlab-cng, gitlab-rails-ce, gitlab-runner-fips, gitlab-kas, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce-fips, gitlab-kas-fips, gitlab-runner...
GHSA-P3CX-FRRM-35M8 vulnerabilities
Vulnerabilities for packages: gitlab-cng, gitlab-rails-ce, gitlab-runner-fips, gitlab-kas, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce-fips, gitlab-kas-fips, gitlab-runner...
CVE-2025-11224 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...