27789 matches found
GHSA-M28W-2PQF-7QGJ vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce, argo-workflows, gitlab-rails-ce-fips...
CVE-2026-14631 vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce, argo-workflows, gitlab-rails-ce-fips...
CVE-2026-56876 vulnerabilities
Vulnerabilities for packages: kibana, gitlab-rails-ce, gitlab-rails-ce-fips...
CVE-2026-14620 vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce, argo-workflows, gitlab-rails-ce-fips...
CVE-2026-79770 vulnerabilities
Vulnerabilities for packages: pact-broker-docker-fips, ruby4.0-rails, ruby3.4-rails, ruby3.2-rails, gitlab-rails-ce, pact-broker-docker, kube-logging-operator, gitlab-rails-ce-fips, ruby3.3-rails...
GHSA-5JHF-FPP7-V2PV vulnerabilities
Vulnerabilities for packages: pact-broker-docker-fips, ruby4.0-rails, ruby3.4-rails, ruby3.2-rails, gitlab-rails-ce, pact-broker-docker, kube-logging-operator, gitlab-rails-ce-fips, ruby3.3-rails...
CVE-2026-79771 vulnerabilities
Vulnerabilities for packages: pact-broker-docker-fips, ruby4.0-rails, ruby3.4-rails, ruby3.2-rails, gitlab-rails-ce, pact-broker-docker, kube-logging-operator, gitlab-rails-ce-fips, ruby3.3-rails...
Dependency Scanning v2.1.1
Component for Dependency and License Scanning This component generates a CycloneDX Software Bill of Materials, which is used by GitLab to identify a project's dependencies, and their licenses. This CycloneDX Software Bill of Materials is compatible with the GitLab taxonomy. Additionally, this...
CICD-Goat-Vapt-Writeup — Updated!
CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. 🧭 How This Fits With My Other Repos Repository| What's in...
CVE-2026-84664
Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators...
CVE-2026-84664
Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators...
EUVD-2026-70130
Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators...
CVE-2026-84664
The Jenkins GitLab Plugin (version 1.9.16 and earlier ) is vulnerable to an improper access control issue due to the use of the Stapler web framework data-binding mechanism. Specifically, the plugin incorrectly uses the @DataBoundConstructor annotation on a constructor, which allows Stapler to in...
CVE-2026-84664
Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators...
CVE-2026-84664
Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators...
BIT-GITLAB-2026-4398 Authorization Bypass Through User-Controlled Key in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user could have assigned compliance frameworks from namespaces they were not authorized to access to their own...
GHSA-6MXV-C89J-2494 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-runner-fips, gitlab-rails-ce, gitlab-kas, gitlab-runner, gitlab-cng, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-rails-ce-fips...
CVE-2026-77801 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-runner-fips, gitlab-rails-ce, gitlab-kas, gitlab-runner, gitlab-cng, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-rails-ce-fips...
