22485 matches found
CVE-2026-13311 vulnerabilities
Vulnerabilities for packages: gemini-cli, code-server, gitlab-rails-ce-fips, gitlab-rails-ce, arangodb...
GHSA-395F-4HP3-45GV vulnerabilities
Vulnerabilities for packages: gemini-cli, code-server, gitlab-rails-ce-fips, gitlab-rails-ce, arangodb...
GHSA-H5PW-H3J7-CJ7F vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-PGGX-2V9R-J6GM vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2025-12506 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-M49F-RVV4-R4RV vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-13320 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-7492 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on any self-managed 18.11.3 server that has not taken the update. Any authenticated user who can push to a project can run it...
electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
Summary In electron-builder's builder-util-runtime package, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization". Other credential-bearing headers — most notably PRIVATE-TOKEN used by GitLab's...
GHSA-P2F4-R6V6-J797 electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
Summary In electron-builder's builder-util-runtime package, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization". Other credential-bearing headers — most notably PRIVATE-TOKEN used by GitLab's...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, pulumi, actions-runner, npm, homepage, code-server, wazuh-dashboard-fips, gitlab-rails-ce-fips, lerna, sqlpad, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce, kibana, opensearch-dashboards, prism, graalvm, saf...
GHSA-W8WR-V893-VJVP vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, pulumi, actions-runner, npm, homepage, code-server, wazuh-dashboard-fips, gitlab-rails-ce-fips, lerna, sqlpad, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce, kibana, opensearch-dashboards, prism, graalvm, saf...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, pulumi, actions-runner, npm, homepage, code-server, wazuh-dashboard-fips, gitlab-rails-ce-fips, lerna, sqlpad, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce, kibana, opensearch-dashboards, prism, graalvm, saf...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, pulumi, actions-runner, npm, code-server, wazuh-dashboard-fips, gitlab-rails-ce-fips, lerna, sqlpad, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce, kibana, opensearch-dashboards, prism, graalvm, saf...
CVE-2026-54466 vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, gitlab-rails-ce...
GHSA-MP7J-QC5W-4988 vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, gitlab-rails-ce...
CVE-2026-54490 vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, gitlab-rails-ce...