PT-2026-54577

Уязвимость инструмента Duo Workflows программной платформы на базе git для совместной работы над кодом GitLab EE/ CE связана с недостаточной защитой регистрационных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой...

PT-2026-54576

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/ CE связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на целостность защищаемой информации...

GHSA-84XV-JFRM-H4GM vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

CVE-2024-1485 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

CVE-2026-54297 vulnerabilities

Vulnerabilities for packages: ruby3.3-faraday, cinc-auditor, kube-fluentd-operator, gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-cng, kube-logging-operator, logstash-fips, logstash...

GHSA-98M9-HRRM-R99R vulnerabilities

Vulnerabilities for packages: ruby3.3-faraday, cinc-auditor, kube-fluentd-operator, gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-cng, kube-logging-operator, logstash-fips, logstash...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: dex-fips, kube-mgmt-fips, commercial-expanso-edge, crossplane-provider-aws-ecr, milvus, aws-ebs-csi-driver-fips, crossplane-provider-aws-cloudwatchevents-fips, crossplane-function-auto-ready, nuclei, grafana, harbor-registry-fips, go-discover-fips,...

Mattermost doesn't enforce administrator authorization on the {{setDefaultInstance}} call within the {{/gitlab connect}} command handler

Mattermost versions 11.7.x slash command.. Mattermost Advisory ID: MMSA-2026-00644...

GHSA-2G8V-GRQ3-HQ2G Mattermost doesn't enforce administrator authorization on the {{setDefaultInstance}} call within the {{/gitlab connect}} command handler

Mattermost versions 11.7.x slash command.. Mattermost Advisory ID: MMSA-2026-00644...

CVE-2026-5139

Mattermost versions 11.7.x slash command.. Mattermost Advisory ID: MMSA-2026-00644...

CVE-2026-5139

Mattermost versions 11.7.x slash command.. Mattermost Advisory ID: MMSA-2026-00644...

CVE-2026-5139 GitLab Plugin Allows Non-Admin Users to Modify Default Instance Configuration

Mattermost versions 11.7.x slash command.. Mattermost Advisory ID: MMSA-2026-00644...

CVE-2026-5139

Mattermost versions 11.7.x = 11.7.0, 11.6.x = 11.6.2, 11.5.x = 11.5.5, 10.11.x = 10.11.17 fail to enforce administrator authorization on the setDefaultInstance call within the /gitlab connect command handler, which allows any authenticated user to overwrite the global default GitLab instance...

CVE-2026-5139 GitLab Plugin Allows Non-Admin Users to Modify Default Instance Configuration

Mattermost versions 11.7.x slash command.. Mattermost Advisory ID: MMSA-2026-00644...

CVE-2026-5139 GitLab Plugin Allows Non-Admin Users to Modify Default Instance Configuration

Mattermost versions 11.7.x slash command.. Mattermost Advisory ID: MMSA-2026-00644...

EUVD-2026-38246

Mattermost versions 11.7.x slash command.. Mattermost Advisory ID: MMSA-2026-00644...

CVE-2026-5139

Mattermost plugin vulnerability CVE-2026-5139 affects Mattermost versions 11.7.x ≤ 11.7.0, 11.6.x ≤ 11.6.2, 11.5.x ≤ 11.5.5, 10.11.x ≤ 10.11.17. The issue arises in the /gitlab connect command handler where administrator authorization is not enforced for the setDefaultInstance call, allowing any ...

PT-2026-51304

Name of the Vulnerable Software and Affected Versions Mattermost version 11.7.0 Mattermost version 11.6.2 Mattermost version 11.5.5 Mattermost version 10.11.17 Description Improper authorization in the GitLab connect command handler allows any authenticated user to overwrite the global default...

CVE-2026-5139: Missing Authorization

Mattermost versions 11.7.x = 11.7.0, 11.6.x = 11.6.2, 11.5.x = 11.5.5, 10.11.x = 10.11.17 fail to enforce administrator authorization on the setDefaultInstance call within the /gitlab connect command handler, which allows any authenticated user to overwrite the global default GitLab instance...

airbyte-source-gitlab (>=2.1.1, <=4.4.0.dev202506251856), airbyte-source-quickbooks (>=3.0.2, <=4.0.4) +9 more potentially affected by unknown CVE via vcrpy (4.1.1)

vcrpy PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - airbyte-source-gitlab =2.1.1, =3.0.2, =0.2.3, =1.0.0, =1.0.0, =8.2.1, =1.7.1, =1.0.2, =2.54.0, =2.92.0 Source cves: unknown CVE Source advisory:...