GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-operationsmanagement, osv-scanner, grype-db, consul-fips, podman, longhorn-cli-fips, kube-arangodb-fips, crossplane-provider-aws-route53resolver, crossplane-provider-aws-emr, crossplane-provider-aws-wafv2-fips, cloudflared-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-operationsmanagement, osv-scanner, grype-db, consul-fips, podman, longhorn-cli-fips, kube-arangodb-fips, crossplane-provider-aws-route53resolver, crossplane-provider-aws-emr, crossplane-provider-aws-wafv2-fips, cloudflared-fips,...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-rails-ce...

CLEANSTART-2026-CH77232 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, kubernetes-csi-external-attacher, kafka-proxy, grafana-rollout-operator, pulumi, azuredisk-csi, cloudflared, crossplane-provider-aws-cloudformation, cilium, kubernetes-csi-livenessprobe, sftpgo-plugin-pubsub, promxy, buildah, thanos,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, aws-s3-controller, kafka-proxy, configmap-reload, sftpgo-plugin-pubsub, promxy, kubernetes-ingress-defaultbackend, octo-sts, kubernetes-event-exporter, kube-state-metrics, crossplane-provider-aws-kinesis, sftpgo-plugin-auth, cass-operator,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: spire-controller-manager, kubernetes-csi-external-attacher, kafka-proxy, grafana-rollout-operator, pulumi, azuredisk-csi, cloudflared, crossplane-provider-aws-cloudformation, cilium, kubernetes-csi-livenessprobe, sftpgo-plugin-pubsub, promxy, buildah, thanos,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: spire-controller-manager, aws-s3-controller, kafka-proxy, configmap-reload, sftpgo-plugin-pubsub, promxy, kubernetes-ingress-defaultbackend, octo-sts, kubernetes-event-exporter, kube-state-metrics, crossplane-provider-aws-kinesis, sftpgo-plugin-auth, cass-operator,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, aws-s3-controller, kafka-proxy, configmap-reload, sftpgo-plugin-pubsub, promxy, kubernetes-ingress-defaultbackend, octo-sts, kubernetes-event-exporter, kube-state-metrics, crossplane-provider-aws-kinesis, sftpgo-plugin-auth, cass-operator,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kpt, gitlab-operator, istio-fips, thanos-receive-controller, openbao-fips, prometheus-process-exporter-fips, consul-fips, vault-csi-provider-fips, kube-arangodb-fips, oauth2-proxy, podinfo, kyverno-policy-reporter-kyverno-plugin, modelmesh-runtime-adapter, rook,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: cluster-api-ipam-provider-in-cluster, minc, kpt, gitlab-operator, istio-fips, aws-network-policy-agent-fips, s5cmd-fips, pgpool2exporter-fips, thanos-receive-controller, openbao-fips, prometheus-process-exporter-fips, stern, consul-fips, podman,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: cluster-api-ipam-provider-in-cluster, minc, kpt, gitlab-operator, istio-fips, aws-network-policy-agent-fips, s5cmd-fips, pgpool2exporter-fips, thanos-receive-controller, openbao-fips, prometheus-process-exporter-fips, stern, consul-fips, podman,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, aws-s3-controller, kafka-proxy, configmap-reload, sftpgo-plugin-pubsub, promxy, kubernetes-ingress-defaultbackend, octo-sts, kubernetes-event-exporter, dgraph, kube-state-metrics, crossplane-provider-aws-kinesis, falco-exporter,...