22494 matches found
PT-2026-39197
Name of the Vulnerable Software and Affected Versions draw.io versions prior to 29.7.9 Description The application accepts a gitlab URL parameter that overrides the GitLab server URL used during OAuth sign-in. An attacker can use a crafted link to cause the "Authorize in GitLab" dialog to open a...
draw.io 信息泄露漏洞
Draw.IO is an open-source configurable chart drawing and whiteboard application. Versions of Draw.IO prior to 29.7.9 had a vulnerability related to information leakage. This vulnerability occurred due to the URL parameter “gitlab” overriding the GitLab server URL used during OAuth login. As a...
CVE-2026-41889 vulnerabilities
Vulnerabilities for packages: dapr, step-ca, chainloop-control-plane, step-fips, falcosidekick-fips, spicedb-fips, argo-workflows-fips, goose, gitlab-kas-fips, jitsucom-bulker, kine, temporal, seaweedfs-fips, kuma, harbor-fips, zitadel, splunk-otel-collector-fips, hydra-fips,...
CVE-2026-41506 vulnerabilities
Vulnerabilities for packages: witness, pulumi-language-yaml, cerbos-fips, argo-workflows-fips, argocd-image-updater, flux, chainloop-cli-fips, snyk-cli, kubevela-fips, gitea-fips, trufflehog-fips, mapotf, rancher-fleet, apko, trivy-fips, kubevela, src-fingerprint, pulumi-language-dotnet,...
GHSA-Q2MW-FVJ9-VVCW vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, kube-fluentd-operator, ruby3.3-rails, ruby3.3-net-imap, logstash-fips, jruby, ruby4.0-net-imap, ruby3.4-net-imap, gitlab-rails-ce-fips, ruby3.2-net-imap, ruby3.2-rails, logstash, gitlab-rails-ce, truffleruby, ruby3.4-rails, kube-logging-operator...
GHSA-HM49-WCQC-G2XG vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, kube-fluentd-operator, ruby3.3-rails, ruby3.3-net-imap, logstash-fips, jruby, ruby4.0-net-imap, ruby3.4-net-imap, gitlab-rails-ce-fips, ruby3.2-net-imap, ruby3.2-rails, logstash, gitlab-rails-ce, truffleruby, ruby3.4-rails, kube-logging-operator...
CVE-2026-42246 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, kube-fluentd-operator, ruby3.3-rails, ruby3.3-net-imap, logstash-fips, jruby, ruby4.0-net-imap, ruby3.4-net-imap, gitlab-rails-ce-fips, ruby3.2-net-imap, ruby3.2-rails, logstash, gitlab-rails-ce, truffleruby, ruby3.4-rails, kube-logging-operator...
CVE-2026-42256 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.3-rails, ruby3.3-net-imap, logstash-fips, jruby, ruby4.0-net-imap, ruby3.4-net-imap, gitlab-rails-ce-fips, ruby3.2-net-imap, ruby3.2-rails, logstash, gitlab-rails-ce, truffleruby, ruby3.4-rails, kube-logging-operator...
CVE-2026-42257 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, kube-fluentd-operator, ruby3.3-rails, ruby3.3-net-imap, logstash-fips, jruby, ruby4.0-net-imap, ruby3.4-net-imap, gitlab-rails-ce-fips, ruby3.2-net-imap, ruby3.2-rails, logstash, gitlab-rails-ce, truffleruby, ruby3.4-rails, kube-logging-operator...
GHSA-75XQ-5H9V-W6PX vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, kube-fluentd-operator, ruby3.3-rails, ruby3.3-net-imap, logstash-fips, jruby, ruby4.0-net-imap, ruby3.4-net-imap, gitlab-rails-ce-fips, ruby3.2-net-imap, ruby3.2-rails, logstash, gitlab-rails-ce, truffleruby, ruby3.4-rails, kube-logging-operator...
GHSA-87PF-FPWV-P7M7 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.3-rails, ruby3.3-net-imap, logstash-fips, jruby, ruby4.0-net-imap, ruby3.4-net-imap, gitlab-rails-ce-fips, ruby3.2-net-imap, ruby3.2-rails, logstash, gitlab-rails-ce, truffleruby, ruby3.4-rails, kube-logging-operator...
CVE-2026-42245 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, kube-fluentd-operator, ruby3.3-rails, ruby3.3-net-imap, logstash-fips, jruby, ruby4.0-net-imap, ruby3.4-net-imap, gitlab-rails-ce-fips, ruby3.2-net-imap, ruby3.2-rails, logstash, gitlab-rails-ce, truffleruby, ruby3.4-rails, kube-logging-operator...
CVE-2026-42258 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, kube-fluentd-operator, ruby3.3-rails, ruby3.3-net-imap, logstash-fips, jruby, ruby4.0-net-imap, ruby3.4-net-imap, gitlab-rails-ce-fips, ruby3.2-net-imap, ruby3.2-rails, logstash, gitlab-rails-ce, truffleruby, ruby3.4-rails, kube-logging-operator...
GHSA-VCGP-9326-PQCP vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, kube-fluentd-operator, ruby3.3-rails, ruby3.3-net-imap, logstash-fips, jruby, ruby4.0-net-imap, ruby3.4-net-imap, gitlab-rails-ce-fips, ruby3.2-net-imap, ruby3.2-rails, logstash, gitlab-rails-ce, truffleruby, ruby3.4-rails, kube-logging-operator...
Linux Distros Unpatched Vulnerability : CVE-2025-13078
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have...
Linux Distros Unpatched Vulnerability : CVE-2026-1660
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain...
Linux Distros Unpatched Vulnerability : CVE-2025-3922
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.4 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have...
Linux Distros Unpatched Vulnerability : CVE-2025-6016
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have...
