4576 matches found
GHSA-CF2V-M456-7QJF vulnerabilities
Vulnerabilities for packages: gitlab-pages-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-rails-ce, gitlab-runner-fips...
CVE-2026-1458 vulnerabilities
Vulnerabilities for packages: gitlab-pages-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-rails-ce, gitlab-runner-fips...
GHSA-95P8-CCJW-3G7F vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-pages-fips, gitlab-runner, gitlab-runner-fips...
GHSA-M668-XFWP-34X6 vulnerabilities
Vulnerabilities for packages: gitlab-pages-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-rails-ce, gitlab-runner-fips...
CVE-2026-0595 vulnerabilities
Vulnerabilities for packages: gitlab-pages-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-rails-ce, gitlab-runner-fips...
CVE-2026-1456 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-pages-fips, gitlab-runner, gitlab-runner-fips...
CVE-2026-1094 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-pages-fips, gitlab-runner, gitlab-runner-fips...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: pcs (UTSA-2026-005315)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005315 advisory. Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large response. Responding with such...
CVE-2026-25757 Unauthenticated Spree Commerce users can view completed guest orders by Order ID
Spree is an open source e-commerce solution built with Ruby on Rails. Prior to versions 5.0.8, 5.1.10, 5.2.7, and 5.3.2, unauthenticated users can view completed guest orders by Order ID. This issue may lead to disclosure of PII of guest users including names, addresses and phone numbers. This...
CVE-2026-25540
Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.3.19, 4.4.13, 4.5.6, Mastodon is vulnerable to web cache poisoning via Rails.cache. When AUTHORIZEDFETCH is enabled, the ActivityPub endpoints for pinned posts and featured hashtags have contents that...
Exploit for Path Traversal in Tuzitio Camaleon_Cms
Exploit-for-CVE-2024-46987 Exploit for CVE-2024-46987 usage:...
CVE-2026-25540
Mastodon prior to versions 4.3.19, 4.4.13, and 4.5.6 is vulnerable to web cache poisoning in Rails.cache when AUTHORIZED_FETCH is enabled. The ActivityPub endpoints for pinned posts and featured hashtags cache responses that depend on the signer’s account, but the internal cache reuse does not re...
PT-2026-6319
Name of the Vulnerable Software and Affected Versions Mastodon versions prior to 4.3.19 Mastodon versions prior to 4.4.13 Mastodon versions prior to 4.5.6 Description Mastodon, a free, open-source social network server based on ActivityPub, contains a flaw related to web cache poisoning. When the...
Decidim 安全漏洞
Decidim is an open-source participatory democracy framework developed using Ruby on Rails. Versions of Decidim from 0.30.0 up to 0.30.4, as well as versions from 0.31.0.rc1 up to 0.31.0, have security vulnerabilities. These vulnerabilities stem from UUID collisions in the private data export...
GHSA-R4MG-4433-C7G3 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
CVE-2025-24293 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
GHSA-QJXF-MC72-WJR2 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips...
CVE-2024-8796 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips...
CVE-2025-24293
Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of potentially unsafe image transformation methods and parameters by default. The default allowed list contains three methods allow for the circumvention of the safe defaults which enables...