103 matches found
cve-2026-85706
CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read CVSS 10.0 · Unauthenticated · Actively exploited CISA KEV A parser differential between GitLab Workhorse Go reverse proxy and Puma/Grape Ruby lets an unauthenticated attacker bypass Workhorse's accelerated-upload handoff and reach three...
CVE-2026-56857 vulnerabilities
Vulnerabilities for packages: commercial-nginx-ingress, commercial-gitlab-rails-ee-fips, consul-k8s-fips, ingress-nginx-controller-fips, k8s-device-plugin, kyverno, tempo-fips, google-osconfig-agent, commercial-expanso-edge, commercial-gitlab-workhorse-ee-fips, telegraf, zitadel,...
GHSA-WR3R-JHMC-F6JW vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips...
CVE-2026-92530 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips...
CVE-2026-92628 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips...
CVE-2026-92874 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips...
GHSA-C3RM-3HQR-4QWM vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips...
GO-2026-5032 vulnerabilities
Vulnerabilities for packages: seaweedfs, seaweedfs-rocksdb, seaweedfs-rocksdb-fips, mattermost-fips, seaweedfs-operator-fips, gitlab-workhorse-ce, seaweedfs-operator, seaweedfs-fips...
GO-2026-5066 vulnerabilities
Vulnerabilities for packages: seaweedfs, hugo, mattermost-fips, rclone-fips, mattermost, seaweedfs-operator-fips, gitlab-workhorse-ce, seaweedfs-operator, seaweedfs-fips, listmonk, rclone...
GO-2026-5031 vulnerabilities
Vulnerabilities for packages: seaweedfs, seaweedfs-rocksdb, seaweedfs-rocksdb-fips, mattermost-fips, seaweedfs-operator-fips, gitlab-workhorse-ce, seaweedfs-operator, seaweedfs-fips...
GO-2026-5062 vulnerabilities
Vulnerabilities for packages: seaweedfs, seaweedfs-rocksdb, hugo, mattermost-fips, seaweedfs-rocksdb-fips, filebrowser, rclone-fips, mattermost, seaweedfs-operator-fips, gitlab-workhorse-ce, seaweedfs-operator, hugo-fips, hugo-extended, seaweedfs-fips, listmonk, mailpit, mailpit-fips, rclone...
GO-2026-4770 vulnerabilities
Vulnerabilities for packages: ferretdb, flux-operator-fips, opencost-fips, datadog-agent, opencost, gitlab-workhorse-ce, osv-scanner, glab, datadog-agent-fips, livekit-cli, gitlab-workhorse-ce-fips, jaeger-fips, flux-operator, jaeger...
GO-2026-4773 vulnerabilities
Vulnerabilities for packages: ferretdb, flux-operator-fips, opencost-fips, datadog-agent, opencost, gitlab-workhorse-ce, osv-scanner, glab, datadog-agent-fips, livekit-cli, gitlab-workhorse-ce-fips, jaeger-fips, flux-operator, jaeger...
GHSA-Q675-QJ96-32M9 vulnerabilities
Vulnerabilities for packages: seaweedfs, seaweedfs-rocksdb, seaweedfs-rocksdb-fips, mattermost-fips, seaweedfs-operator-fips, gitlab-workhorse-ce, seaweedfs-operator, seaweedfs-fips...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: prometheus-mongodb-exporter, gitea, opentelemetry-collector, argo-workflows-fips, chisel, omnictl-multiarch, gitlab-workhorse-ce-fips, backup-restore-operator, cloudbeat-fips, zitadel, k9s-fips, gitlab-rails-ce-fips, flux-fips, kots, nemo, knative-serving, etcd-fips,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: croc, amazon-cloudwatch-agent-fips, zitadel, step-fips, local-path-provisioner, envconsul-fips, flux-helm-controller, databricks-cli, bank-vaults-fips, contour-fips, dex-fips, db-operator-fips, nfpm, flux-image-automation-controller, k8sgpt-operator, kubeflow-fips,...
CVE-2026-1182 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce, gitlab-kas-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-kas, gitlab-rails-ce-fips...
GHSA-P3CX-FRRM-35M8 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce, gitlab-kas-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-kas, gitlab-rails-ce-fips...