3027 matches found
GO-2026-5666 vulnerabilities
Vulnerabilities for packages: rancher-fleet, kuma, flux, helm-push, cert-manager-cmctl, cilium-cli, flux-source-controller, kots, zarf...
GO-2023-2412 vulnerabilities
Vulnerabilities for packages: eksctl, k3d, k8sgpt, kubescape, newrelic-infrastructure-agent, skaffold, kubevela, zot, melange, buildkitd, flux-source-controller, kots, trivy, grype, helm-push, gitness, up, cilium-cli, flux-helm-controller, helm, kaniko, ctop, fuse-overlayfs-snapshotter...
GO-2025-4100 vulnerabilities
Vulnerabilities for packages: dagger, eksctl, chartmuseum, gogatekeeper, k8sgpt, nerdctl, kargo, k9s, kubescape, newrelic-infrastructure-agent, kubescape-operator, helm-set-status, k3s, falco-no-driver, k8ssandra-client, skaffold, trivy-operator, docker-cli-buildx, xeol, kubevela, zot, melange,...
GO-2025-4108 vulnerabilities
Vulnerabilities for packages: dagger, eksctl, chartmuseum, gogatekeeper, k8sgpt, nerdctl, kargo, k9s, kubescape, newrelic-infrastructure-agent, kubescape-operator, helm-set-status, k3s, falco-no-driver, k8ssandra-client, skaffold, trivy-operator, docker-cli-buildx, xeol, kubevela, zot, melange,...
GO-2025-3802 vulnerabilities
Vulnerabilities for packages: eksctl, chartmuseum, k8sgpt, cerbos, kargo, k9s, tw, k8ssandra-client, zot, pluto, istio, envoy-gateway, cert-manager-cmctl, flux-source-controller, kots, trivy, chart-testing, helm-push, cilium-cli, helm-operator, flux-helm-controller, zarf, rancher-fleet,...
GO-2024-2737 vulnerabilities
Vulnerabilities for packages: dagger, k3d, melange, grype, wolfictl, kaniko, policy-controller, docker-compose, neuvector-scanner, harbor-scanner-trivy, buf, helm-push, cri-tools, syft...
CVE-2026-58437 Repository Visibility Manipulation via Git Push Options
Repository Visibility Manipulation via Git Push Options...
CVE-2026-58437 Repository Visibility Manipulation via Git Push Options
Repository Visibility Manipulation via Git Push Options...
CVE-2026-58437
Repository Visibility Manipulation via Git Push Options...
EUVD-2026-58164
Repository Visibility Manipulation via Git Push Options...
CVE-2026-73625
GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clonefrom, fetch, pull, push, lsremote, itercommit...
UBUNTU-CVE-2026-73625
GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clonefrom, fetch, pull, push, lsremote, itercommit...
EUVD-2026-57794
GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clonefrom, fetch, pull, push, lsremote, itercommit...
CVE-2026-73625
GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clonefrom, fetch, pull, push, lsremote, itercommit...
CVE-2026-58437: Improper Access Control
Repository Visibility Manipulation via Git Push Options...
CVE-2026-73625: Improper Neutralization of Special Elements used in an OS Command
GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clonefrom, fetch, pull, push, lsremote, itercommit...
CVE-2026-15423
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute CI/CD pipelines on a protected branch without...
CVE-2026-15423 Incorrect Authorization in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute CI/CD pipelines on a protected branch without...
PT-2026-71198
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 19.0 through 19.0.5 GitLab CE/EE versions 19.1 through 19.1.3 GitLab CE/EE versions 19.2 through 19.2.1 Description Improper authorization in pipeline reference validation allows an authenticated user with developer-role...