PT-2026-24712

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service by sending specially crafted GraphQL requests due to uncontrolled recursion under certain circumstances...

FreeBSD : Gitlab -- vulnerabilities (0236eab0-1d62-11f1-88f8-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 0236eab0-1d62-11f1-88f8-2cf05da270f3 advisory. Gitlab reports: Cross-site Scripting issue in Markdown placeholder processing impacts GitLab...

GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD continuous integration and delivery. Vulnerabilities exist in versions of GitLab CE/EE before 18.7.6, 18.8.6...

GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Vulnerabilities exist in versions of GitLab CE/EE before 18.7.6, 18.8.6...

GitLab 10.6 < 18.7.6 / 18.8 < 18.8.6 / 18.9 < 18.9.2 (CVE-2026-1090)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user, when the...

GitLab 18.9 < 18.9.2 (CVE-2026-1069)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.9.2... CVE-2026-1069 Note that Nessus has not tested for this issue but has instead relied only on the...

GitLab 8.11 < 18.7.6 / 18.8 < 18.8.6 / 18.9 < 18.9.2 (CVE-2026-3848)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to make unintend...

CVE-2026-27138 vulnerabilities

Vulnerabilities for packages: dkron, flux-image-automation-controller, aws-load-balancer-controller-fips, flux-notification-controller, nova-fips, loki-fips, temporal-fips, flux-operator-fips, terragrunt, cluster-autoscaler-fips, go, polaris, aws-ebs-csi-driver, cert-manager-fips, grafana-fips,...

GHSA-7HFW-R8QC-89V4 vulnerabilities

Vulnerabilities for packages: dkron, flux-image-automation-controller, aws-load-balancer-controller-fips, flux-notification-controller, nova-fips, loki-fips, temporal-fips, flux-operator-fips, terragrunt, cluster-autoscaler-fips, go, polaris, aws-ebs-csi-driver, cert-manager-fips, grafana-fips,...

GHSA-PH5J-38MG-J6HP vulnerabilities

Vulnerabilities for packages: dkron, flux-image-automation-controller, aws-load-balancer-controller-fips, flux-notification-controller, nova-fips, loki-fips, temporal-fips, flux-operator-fips, terragrunt, cluster-autoscaler-fips, go, polaris, aws-ebs-csi-driver, cert-manager-fips, grafana-fips,...

CVE-2026-27137 vulnerabilities

Vulnerabilities for packages: dkron, flux-image-automation-controller, aws-load-balancer-controller-fips, flux-notification-controller, nova-fips, loki-fips, temporal-fips, flux-operator-fips, terragrunt, cluster-autoscaler-fips, go, polaris, aws-ebs-csi-driver, cert-manager-fips, grafana-fips,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: bom, cluster-api-provider-vsphere, fscrypt, kubernetes-dashboard-web, lvm-driver, prometheus, sftpgo, snyk-cli, step-ca, amazon-cloudwatch-agent-operator, authservice, crossplane-provider-aws-ec2, crossplane-provider-aws-sqs, azcopy, kubernetes-csi-livenessprobe,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: bom, cluster-api-provider-vsphere, fscrypt, kubernetes-dashboard-web, lvm-driver, prometheus, sftpgo, snyk-cli, step-ca, amazon-cloudwatch-agent-operator, authservice, crossplane-provider-aws-ec2, crossplane-provider-aws-sqs, azcopy, kubernetes-csi-livenessprobe,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: prometheus, fscrypt, nri-couchbase, crossplane-provider-aws-sqs, tigera-operator, azcopy, secrets-store-csi-driver-provider-gcp, kustomize, node-problem-detector, pulumi-language-java, minify, kubelet-csr-approver, kube-fluentd-operator, redka, spqr, trillian,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: prometheus, fscrypt, nri-couchbase, crossplane-provider-aws-sqs, tigera-operator, azcopy, secrets-store-csi-driver-provider-gcp, kustomize, node-problem-detector, pulumi-language-java, minify, kubelet-csr-approver, kube-fluentd-operator, redka, spqr, trillian,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: prometheus, fscrypt, nri-couchbase, crossplane-provider-aws-sqs, tigera-operator, azcopy, secrets-store-csi-driver-provider-gcp, kustomize, node-problem-detector, pulumi-language-java, minify, kubelet-csr-approver, kube-fluentd-operator, redka, spqr, mockgen, trillia...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, prometheus-podman-exporter, dkron, step-ca-fips, gatus-fips, temporal-fips, beats-fips, verticadb-operator-fips, k8s-metacollector-fips, crossplane-provider-aws-dynamodb-fips, blob-csi-fips, pulumi-language-dotnet, eks-distro-fip...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, nri-elasticsearch, prometheus-podman-exporter, stern, dkron, step-ca-fips, gatus-fips, k8s-driver-manager-fips, http-echo, temporal-fips, aws-privateca-issuer-fips, beats-fips, verticadb-operator-fips, k8s-metacollector-fips,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, nri-elasticsearch, prometheus-podman-exporter, stern, dkron, step-ca-fips, gatus-fips, k8s-driver-manager-fips, http-echo, temporal-fips, aws-privateca-issuer-fips, beats-fips, verticadb-operator-fips, k8s-metacollector-fips,...

Linux Distros Unpatched Vulnerability : CVE-2025-14511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowe...