103 matches found
cve-2026-85706
CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read CVSS 10.0 · Unauthenticated · Actively exploited CISA KEV A parser differential between GitLab Workhorse Go reverse proxy and Puma/Grape Ruby lets an unauthenticated attacker bypass Workhorse's accelerated-upload handoff and reach three...
CVE-2026-56857 vulnerabilities
Vulnerabilities for packages: reports-server, nemo-gym, cert-manager, tempo-fips, falco-no-driver, kube-conformance, kubernetes, commercial-gitlab-workhorse-ee-fips, commercial-chainloop-cli, cosign-fips, terraform, kyverno, opentelemetry-collector-k8s, frankenphp-8.3, spire-server, karpenter-fip...
GHSA-WR3R-JHMC-F6JW vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips...
CVE-2026-92530 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips...
CVE-2026-92628 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips...
CVE-2026-92874 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips...
GHSA-C3RM-3HQR-4QWM vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips...
GO-2026-5032 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, seaweedfs-operator-fips, seaweedfs-rocksdb-fips, seaweedfs-operator, seaweedfs-rocksdb, mattermost-fips, seaweedfs, seaweedfs-fips...
GO-2026-5066 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, listmonk, seaweedfs-operator-fips, seaweedfs-operator, rclone-fips, hugo, mattermost, rclone, mattermost-fips, seaweedfs, seaweedfs-fips...
GO-2026-5031 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, seaweedfs-operator-fips, seaweedfs-rocksdb-fips, seaweedfs-operator, seaweedfs-rocksdb, mattermost-fips, seaweedfs, seaweedfs-fips...
GO-2026-5062 vulnerabilities
Vulnerabilities for packages: filebrowser, gitlab-workhorse-ce, listmonk, seaweedfs-operator-fips, seaweedfs-rocksdb-fips, seaweedfs-operator, seaweedfs-rocksdb, hugo-fips, rclone-fips, hugo, mattermost, mailpit-fips, seaweedfs-fips, rclone, mattermost-fips, hugo-extended, seaweedfs, mailpit...
GO-2026-4770 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, jaeger, osv-scanner, gitlab-workhorse-ce, opencost, glab, jaeger-fips, ferretdb, livekit-cli, flux-operator, datadog-agent-fips, flux-operator-fips, datadog-agent, opencost-fips...
GO-2026-4773 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, jaeger, osv-scanner, gitlab-workhorse-ce, opencost, glab, jaeger-fips, ferretdb, livekit-cli, flux-operator, datadog-agent-fips, flux-operator-fips, datadog-agent, opencost-fips...
GHSA-Q675-QJ96-32M9 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, seaweedfs-operator-fips, seaweedfs-rocksdb-fips, seaweedfs-operator, seaweedfs-rocksdb, mattermost-fips, seaweedfs, seaweedfs-fips...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: cloudbeat, reports-server, kuma, opentofu-fips, prometheus-mongodb-exporter, zarf, argo-cd, frankenphp-8.3, seaweedfs-rocksdb-fips, cilium-cli, loki, trivy, kube-arangodb-fips, kube-state-metrics, grafana, backup-restore-operator, knative-serving, zitadel, osv-scanne...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: aws-load-balancer-controller-fips, jupyterhub-k8s-image-awaiter-fips, prometheus-process-exporter-fips, polaris-fips, bazelisk, minc-fips, kubewatch, docker-cli-fips, buildtools-fips, k8s-device-plugin, php-fpmexporter, git-sync-fips, contour-fips, dapr-fips,...
GHSA-P3CX-FRRM-35M8 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-cng-fips, gitlab-kas-fips, gitlab-rails-ce-fips, gitlab-kas, gitlab-runner-fips...
CVE-2026-1182 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-cng-fips, gitlab-kas-fips, gitlab-rails-ce-fips, gitlab-kas, gitlab-runner-fips...