4495 matches found
CVE-2026-54463 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
CVE-2026-54464 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
GHSA-GHHP-3QVG-889P vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
GHSA-8J3G-F24P-4MPW vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
GHSA-33PH-FCCM-39PJ vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
CVE-2026-73330 CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action
CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to execute arbitrary commands by embedding ERB tags in the email parameter of the testemail settings action, which are evaluated when an SMTP rejection reflects the recipient address...
CVE-2026-73330 CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action
CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to execute arbitrary commands by embedding ERB tags in the email parameter of the testemail settings action, which are evaluated when an SMTP rejection reflects the recipient address...
CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action
CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to execute arbitrary commands by embedding ERB tags in the email parameter of the testemail settings action, which are evaluated when an SMTP rejection reflects the recipient address...
CVE-2026-72915 Mastodon: Personally-identifying information disclosure due to incorrect access control validation
Mastodon is a free, open-source social network server based on ActivityPub. From 4.6.0-beta.1 until 4.6.4 and 4.7.0-beta.1, any logged-in local user could use the show action in app/controllers/admin/collectionscontroller.rb to access personally identifying information about another local user in...
CVE-2026-67214 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse-fips, dotstatsuite-supercore, langfuse, arangodb, opensearch-dashboards-fips, opensearch-dashboards, nextcloud-server, gitlab-rails-ce-fips, gitlab-rails-ce...
GHSA-28WG-GHJ8-5HJV vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse-fips, dotstatsuite-supercore, langfuse, arangodb, opensearch-dashboards-fips, opensearch-dashboards, nextcloud-server, gitlab-rails-ce-fips, gitlab-rails-ce...
GHSA-9HJ4-R449-HFVC vulnerabilities
Vulnerabilities for packages: logstash, pact-broker-docker, pact-broker-docker-fips, ruby3.2-rails, ruby3.4-rails, ruby3.3-rails, logstash-fips, cinc-auditor...
CVE-2026-71847 vulnerabilities
Vulnerabilities for packages: logstash, pact-broker-docker, pact-broker-docker-fips, ruby3.2-rails, ruby3.4-rails, ruby3.3-rails, logstash-fips, cinc-auditor...
GHSA-6FHJ-CGMM-XFX6 vulnerabilities
Vulnerabilities for packages: gitlab-cng, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-cng-fips...
GHSA-G9G2-QC64-JGCJ vulnerabilities
Vulnerabilities for packages: gitlab-cng, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-cng-fips...
GHSA-86R3-Q889-HVG2 vulnerabilities
Vulnerabilities for packages: gitlab-cng, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-cng-fips...
GHSA-35PC-QWV6-4858 vulnerabilities
Vulnerabilities for packages: gitlab-cng, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-cng-fips...
CVE-2026-6267 vulnerabilities
Vulnerabilities for packages: gitlab-cng, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-cng-fips...