PT-2026-73292

GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to merge code into a protected branch without the required approvals due to a race conditio...

PT-2026-73290

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to commit changes to a project after being removed as a...

GO-2026-5066 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, rclone, mattermost, listmonk, mattermost-fips, seaweedfs-fips, seaweedfs-operator, hugo, seaweedfs-operator-fips, rclone-fips, seaweedfs...

GO-2026-5031 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, mattermost-fips, seaweedfs-rocksdb, seaweedfs-fips, seaweedfs-rocksdb-fips, seaweedfs-operator, seaweedfs-operator-fips, seaweedfs...

GO-2026-5032 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, mattermost-fips, seaweedfs-rocksdb, seaweedfs-fips, seaweedfs-rocksdb-fips, seaweedfs-operator, seaweedfs-operator-fips, seaweedfs...

GO-2024-2576 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

GO-2026-5024 vulnerabilities

Vulnerabilities for packages: kube-conformance, commercial-kyverno, containerd, gitlab-workhorse-ce, helm, knative-operator-fips, net-kourier-fips, kubeflow-katib, gitlab-rails-ce, trino, etcd, k3s, etcd-fips, gitlab-rails-ce-fips, kyverno, upwind-agent...

GO-2026-5062 vulnerabilities

Vulnerabilities for packages: filebrowser, gitlab-workhorse-ce, rclone, mattermost, hugo-extended, listmonk, mailpit-fips, mattermost-fips, seaweedfs-fips, mailpit, seaweedfs-operator, seaweedfs-rocksdb, seaweedfs-rocksdb-fips, hugo, hugo-fips, seaweedfs-operator-fips, rclone-fips, seaweedfs...

GO-2026-6003 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator-fips, tigera-operator, gitlab-operator-fips, gitlab-operator, datadog-agent-fips...

GO-2026-6005 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator-fips, tigera-operator, gitlab-operator-fips, gitlab-operator, datadog-agent-fips...

GO-2026-6006 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator-fips, tigera-operator, gitlab-operator-fips, gitlab-operator, datadog-agent-fips...

GO-2026-6007 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator-fips, tigera-operator, gitlab-operator-fips, gitlab-operator, datadog-agent-fips...

GO-2026-6011 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator-fips, tigera-operator, gitlab-operator-fips, gitlab-operator, datadog-agent-fips...

GO-2026-4773 vulnerabilities

Vulnerabilities for packages: flux-operator, datadog-agent, ferretdb, gitlab-workhorse-ce, jaeger, jaeger-fips, osv-scanner, glab, gitlab-workhorse-ce-fips, flux-operator-fips, opencost, opencost-fips, datadog-agent-fips, livekit-cli...

GO-2026-4770 vulnerabilities

Vulnerabilities for packages: flux-operator, datadog-agent, ferretdb, gitlab-workhorse-ce, jaeger, jaeger-fips, osv-scanner, glab, gitlab-workhorse-ce-fips, flux-operator-fips, opencost, opencost-fips, datadog-agent-fips, livekit-cli...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes-fips, opentelemetry-operator-fips, cert-manager-istio-csr-fips, mariadb-operator-fips, cert-manager-csi-driver-fips, percona-xtradb-cluster-operator-fips, cert-manager-cmctl, step-issuer-fips, percona-server-mongodb-operator,...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno, bank-vaults, jitsucom-bulker, grafana-fips, k9s-fips, grafana, ratify-fips, tkn-fips, rancher-security-scan, pluto-fips, zitadel, mattermost-fips, beats, beats-fips, boring-registry-fips, istio-fips, docker-compose-fips,...

GO-2025-4116 vulnerabilities

Vulnerabilities for packages: kube-conformance, cert-manager-fips, gitlab-rails-ce, etcd, k3s, etcd-fips, gitlab-rails-ce-fips, rke2-runtime-fips, vault, backup-restore-operator, terraform, consul-k8s, falco-no-driver...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: helm-exporter-fips, helm-set-status, kube-arangodb, kyverno, maru, redpanda-operator, helm-mapkubeapis, tigera-operator, opentofu-fips, trivy-fips, vcluster, crossplane, kube-mgmt, kubescape-server-fips, cloudbeat-fips, falcoctl-fips, kots, cluster-api-helm-controlle...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, zot, gitlab-rails-ce, argocd-image-updater, portieris, envoy-gateway, gitlab-rails-ce-fips, portieris-fips, gitness, kots, envoy-gateway-fips...