EUVD-2026-36222

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that could have allowed an authenticated user to cause denial of service on the CI/CD Catalog page due to improper sanitization...

CVE-2026-10733

GitLab CVE-2026-10733 affects GitLab CE/EE versions prior to 18.10.8 (from 17.0 line), 18.11 prior to 18.11.5, and 19.0 prior to 19.0.2. Root cause: improper sanitization that could allow an authenticated user to cause a denial-of-service on the CI/CD Catalog page. Remediation: upgrade to the pat...

CVE-2026-10733 Improper Restriction of Rendered UI Layers or Frames in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that could have allowed an authenticated user to cause denial of service on the CI/CD Catalog page due to improper sanitization...

SUSE-SU-2026:2365-1 Security update for cosign

This update for cosign fixes the following issue - CVE-2026-39395: Incorrect attestation verification due to malformed payloads or mismatched predicate types bsc1261859. Changes for cosign: - update to 3.0.6: Fix DSSE predicate check GHSA-w6c6-c85g-mmv6 4801 Handle whitespace-only certificate...

CVE-2026-47240 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.4-rails, logstash, ruby3.3-rails, gitlab-rails-ce, gitlab-rails-ce-fips, kube-fluentd-operator, kube-logging-operator, logstash-fips, ruby3.2-rails, truffleruby, jruby...

GHSA-46Q3-7GV7-QMGG vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.4-rails, logstash, ruby3.3-rails, gitlab-rails-ce, gitlab-rails-ce-fips, kube-fluentd-operator, kube-logging-operator, logstash-fips, ruby3.2-rails, truffleruby, jruby...

GHSA-8P34-64R3-MWG8 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.4-rails, logstash, ruby3.3-rails, gitlab-rails-ce, gitlab-rails-ce-fips, kube-fluentd-operator, kube-logging-operator, logstash-fips, ruby3.2-rails, truffleruby, jruby...

CVE-2026-47242 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.4-rails, logstash, ruby3.3-rails, gitlab-rails-ce, gitlab-rails-ce-fips, kube-fluentd-operator, kube-logging-operator, logstash-fips, ruby3.2-rails, truffleruby, jruby...

CVE-2026-47241 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.4-rails, logstash, ruby3.3-rails, gitlab-rails-ce, gitlab-rails-ce-fips, kube-fluentd-operator, kube-logging-operator, logstash-fips, ruby3.2-rails, truffleruby, jruby...

GHSA-C4FP-CXRR-MJ66 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.4-rails, logstash, ruby3.3-rails, gitlab-rails-ce, gitlab-rails-ce-fips, kube-fluentd-operator, kube-logging-operator, logstash-fips, ruby3.2-rails, truffleruby, jruby...

CVE-2026-7250

creationtimestamp| type| source ---|---|--- 2026-06-11 01:08:31+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-16 2026-06-11 12:45:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxmissr2y 2026-06-11 18:00:00+00:00| seen|...

CVE-2026-10087

creationtimestamp| type| source ---|---|--- 2026-06-11 01:08:31+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-16 2026-06-11 12:45:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxmissr2y 2026-06-11 13:42:39+00:00| seen|...

CVE-2026-8589

creationtimestamp| type| source ---|---|--- 2026-06-11 01:08:31+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-16 2026-06-11 12:45:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxmissr2y 2026-06-11 14:22:43+00:00| seen|...

PT-2026-48650

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 15.10 through 18.10.7 GitLab CE/EE versions 18.11 through 18.11.4 GitLab CE/EE versions 19.0 through 19.0.1 Description Incorrect authorization enforcements allow an authenticated user with developer-role permissions to...

PT-2026-48655

Name of the Vulnerable Software and Affected Versions GitLab EE versions 13.1.4 through 18.10.7 GitLab EE versions 18.11 through 18.11.4 GitLab EE versions 19.0 through 19.0.1 Description An issue exists where an authenticated user can add unauthorized email addresses to a targeted user's account...

PT-2026-48646

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 12.0 through 18.10.7 GitLab CE/EE versions 18.11 through 18.11.4 GitLab CE/EE versions 19.0 through 19.0.1 Description An issue exists where incorrect authorization checks could allow an authenticated user to access...

GitLab 17.10 < 18.10.8 / 18.11 < 18.11.5 / 19.0 < 19.0.2 (CVE-2026-1500)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an...

GitLab Enterprise Edition（EE）和GitLab Community Edition（CE） 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. There were security vulnerabilities in versions of GitLab CE/EE between 15...

GitLab 处理逻辑错误漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. There were security vulnerabilities in versions prior to 17.0, 18.11,...

GitLab 跨站脚本漏洞

GitLab Enterprise Edition EE is a content management system provided by the American company GitLab. Versions of GitLab EE from 17.1 to 18.10.8, 18.11 to 18.11.5, and 19.0 to 19.0.2 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper input in the analysis...