27724 matches found
GHSA-XW26-H8VQ-GFF9 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
CVE-2026-16275 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
CVE-2026-82632 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
CVE-2026-85529 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
Exploit for Integer Overflow or Wraparound in Gitlab
CVE-2026-97229 CVE-2026-97229 an external exploit for GitLab C...
GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File Read
GitLab CE/EE contains an unauthenticated arbitrary file read. Workhorse, the reverse proxy in front of Rails, matches upload routes using EscapedPath and path.Clean without decoding percent sequences, while Puma decodes them before routing to Grape. Appending a trailing slash to commits or...
GitLab - Account Takeover via Password Reset
An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to a...
CentOS Linux 7 [TuxCare] Security Update: ruby / ruby-devel / ruby-doc / ruby-irb / ruby-libs / ruby-tcltk / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792791338)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792791338 advisory. - An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9,...
PT-2026-123445
Burrito is a Terraform Automation Collaboration Software TACoS Kubernetes operator. Prior to 0.13.0, POST /api/webhook accepts unsigned GitHub and GitLab events when a TerraformRepository's credentials omit webhookSecret or set it to an empty value, including credentials configured for git...
gh-legitify
gh-legitify GitHub CLI extension for Strengthen the security posture of your source-code management! Detect and remediate misconfigurations, security and compliance issues across all your GitHub and GitLab assets with ease 🔥 by Legit Security. Install gh extension install legit-labs/gh-legitify...
Review.CVE-2023-5612
CVE-2023-5612 – GitLab SSRF via Webhook URL PoC & Analysis 📌 CVE Overview CVE-ID: CVE-2023-5612 Severity: High CVSS: 8.1 Base Score Type: Server-Side Request Forgery SSRF Component: GitLab CE/EE Webhooks Affected Versions: GitLab CE/EE " \ --data-urlencode "url=http://127.0.0.1:8888" ...
GitLab 19.5.0 Integer Overflow Detection Tool
This tool assesses GitLab CE/EE version exposure to an integer overflow that can permit unauthenticated remote code execution and triages local exception logs for related indicators...
SUSE CVE-2026-97229
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular...
Exploit for CVE-2026-110264
Exploit...
CVE-2026-114604 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips...
GHSA-C4QX-W738-7HR3 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips...
Exploit for CVE-2026-110264
PoC CVE-2026-110264 — GitLab Org-mode / Onigmo Unauthenticated...
CVE-2026-97229 vulnerabilities
Vulnerabilities for packages: ruby...
