148 matches found
CVE-2026-25679 vulnerabilities
Vulnerabilities for packages: azure-workload-identity-webhook, docker-cli, coredns, oras, gitlab-kas, postgres-operator, azurefile-csi, terraform-provider-random, nri-rabbitmq, metacontroller, k8s-device-plugin, containerd, go, sbomqs, mesosphere-vsphere-csi, secrets-store-csi-driver-provider-aws...
GHSA-RV83-G57W-FR8J vulnerabilities
Vulnerabilities for packages: azure-workload-identity-webhook, wazero, docker-cli, coredns, oras, gitlab-kas, postgres-operator, azurefile-csi, terraform-provider-random, nri-rabbitmq, metacontroller, k8s-device-plugin, containerd, go, sbomqs, mesosphere-vsphere-csi,...
GHSA-J3GX-2473-5FP8 vulnerabilities
Vulnerabilities for packages: azure-workload-identity-webhook, docker-cli, coredns, oras, gitlab-kas, postgres-operator, azurefile-csi, terraform-provider-random, nri-rabbitmq, metacontroller, k8s-device-plugin, containerd, go, sbomqs, mesosphere-vsphere-csi, secrets-store-csi-driver-provider-aws...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: mcp-grafana, rancher-helm, dataplaneapi, crossplane-provider-aws-cloudfront, gitlab-pages, polaris, undock, opentofu, kubernetes-csi-driver-nfs, docker-cli, ksops, coredns, kubernetes-dashboard-auth, octo-sts, cri-tools, kubo, x509-certificate-exporter,...
CVE-2026-27142 vulnerabilities
Vulnerabilities for packages: mcp-grafana, rancher-helm, dataplaneapi, crossplane-provider-aws-cloudfront, gitlab-pages, polaris, undock, opentofu, kubernetes-csi-driver-nfs, docker-cli, ksops, coredns, kubernetes-dashboard-auth, octo-sts, cri-tools, kubo, x509-certificate-exporter,...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: step-issuer-fips, k8sgpt, crossplane-provider-aws-memorydb-fips, kube-logging-logging-operator, crossplane-fips, prometheus-bind-exporter, mesosphere-vsphere-csi-fips, eks-distro, flannel-fips, cephcsi-fips, terraform-provider-google, mattermost-fips,...
GHSA-RV83-G57W-FR8J vulnerabilities
Vulnerabilities for packages: step-issuer-fips, nri-nginx, k8sgpt, vertical-pod-autoscaler-fips, kratos, crossplane-provider-aws-memorydb-fips, azure-workload-identity-webhook, kube-logging-logging-operator, pguser, crossplane-fips, renovate, prometheus-bind-exporter, mesosphere-vsphere-csi-fips,...
CVE-2026-25679 vulnerabilities
Vulnerabilities for packages: step-issuer-fips, nri-nginx, k8sgpt, vertical-pod-autoscaler-fips, crossplane-provider-aws-memorydb-fips, azure-workload-identity-webhook, kube-logging-logging-operator, pguser, crossplane-fips, prometheus-bind-exporter, mesosphere-vsphere-csi-fips, eks-distro,...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: ini-file, azure-workload-identity-webhook, wazero, docker-cli, crossplane-provider-keycloak, coredns, crossplane-provider-azure-storage, kyverno-notation-aws, oras, task, gitlab-kas, golangci-lint, cni-plugins, postgres-operator, direnv, multus-cni, flux,...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: azure-workload-identity-webhook, docker-cli, crossplane-provider-keycloak, coredns, crossplane-provider-azure-storage, kyverno-notation-aws, oras, task, gitlab-kas, golangci-lint, postgres-operator, direnv, flux, terraform-provider-random, gostatsd, k8s-device-plugin...
GHSA-H355-32PF-P2XM vulnerabilities
Vulnerabilities for packages: azure-workload-identity-webhook, docker-cli, crossplane-provider-keycloak, coredns, crossplane-provider-azure-storage, kyverno-notation-aws, oras, task, gitlab-kas, golangci-lint, postgres-operator, direnv, flux, terraform-provider-random, gostatsd, k8s-device-plugin...
CLEANSTART-2026-NA36743 Within HostnameError
Security vulnerability affects the gitlab-pages-fips package. Within HostnameError...
CVE-2021-22171
Insufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+ allows an attacker to steal a victim's API token if they click on a maliciously crafted link...
CVE-2025-7736
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to bypass access control restrictions and view GitLab Pages content intended only for project members by...
CVE-2025-7736 Incorrect Authorization in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to bypass access control restrictions and view GitLab Pages content intended only for project members by...
CVE-2025-7736: Incorrect Authorization
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to bypass access control restrictions and view GitLab Pages content intended only for project members by...
GitLab 安全漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability in GitLab CE and EE versions 17.9 through 18.3.6 prio...
PT-2025-47053
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.9 through 18.3.5 GitLab CE/EE versions 18.4 through 18.4.3 GitLab CE/EE versions 18.5 through 18.5.1 Description An authenticated attacker could bypass access control restrictions and view GitLab Pages content intended...
