27723 matches found
CVE-2026-116587 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, vcluster, opentelemetry-collector-contrib, vitess, falcosidekick, vexctl, litestream, kubo, azcopy, consul-k8s, weaviate, envconsul, seaweedfs, falco-no-driver, percona-server-mongodb-operator, neuvector-sigstore-interface, trufflehog, k9s, juicef...
CVE-2026-79656 OAuth and OIDC tokens written unredacted to server logs by the Generic OAuth, Google and GitLab connectors
A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC access, refresh and ID tokens of users who sign in through the Generic OAuth, Google or GitLab providers. Grafana writes these tokens to its logs unredacted when an access or ID...
CVE-2026-79656
A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC access, refresh and ID tokens of users who sign in through the Generic OAuth, Google or GitLab providers. Grafana writes these tokens to its logs unredacted when an access or ID...
CVE-2026-79656
Grafana is vulnerable to the exposure of sensitive information in log files via the Generic OAuth, Google, and GitLab connectors . A user with read access to Grafana's server logs or a downstream log store can recover OAuth and OIDC access, refresh, and ID tokens . This occurs when an access or I...
VulnCheck KEV: CVE-2026-97229
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular...
SUSE CVE-2026-93577
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when...
reposaur
Reposaur Reposaur is the open source compliance tool for development platforms. Audit, verify and report on your data and configurations easily with pre-defined and/or custom policies. Supports GitHub. GitLab, BitBucket and Gitea support soon. ⚠️ before 1.0.0 expect some bugs and API changes ⚠️...
GitLab 19.4.1 CI/CD Regular Expression Remote Code Execution
GitLab versions 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 contain an integer overflow in CI/CD regular expression handling that can allow remote code execution. Includes a proof of concept. https://packetstorm.news/download/237901...
CVE-2026-101168 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
CVE-2026-16275 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
CVE-2026-82632 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
CVE-2026-85529 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
GHSA-F8H6-2X47-CRGV vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
GHSA-HX4M-W847-W5H9 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
CVE-2026-84284 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
GHSA-3G57-F338-642Q vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
GHSA-XW26-H8VQ-GFF9 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
GHSA-49C6-8PH4-9VR9 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...