WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product git✕
Overview 2,733 matches · 384 in Waratek scope · 21 protected · 37 exploited · 14 CISA KEV · 132 public PoC · 55 EPSS ≥ 0.5
2,733matches 384in Waratek scope14.1% 21protected0.8% 37exploited1.4% 14CISA KEV0.5% 132public PoC4.8% 55EPSS ≥ 0.52.0%
Protected by Waratek 21 0.8% Rule in development 1 0.0% Mitigation candidate 12 0.4% No exploit published 350 12.8% Outside Waratek scope 6 0.2% Not applicable 2,343 85.7% Withdrawn CVE 0 0.0%
Critical 273 10.0% High 869 31.8% Medium 1,488 54.4% Low 103 3.8% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 21 0.8% partly blocked 0 0.0% not blocked 2,712 99.2% not established 0 0.0% unrecorded 0 0.0%
Exploited 37 1.4% Working exploit published 89 3.3% Proof of concept only 252 9.2% Forecast only 13 0.5% No public exploit 2,342 85.7%
split by peak 423 / year
Not applicable: 2,343Outside Waratek scope: 6No exploit published: 350Mitigation candidate: 12Rule in development: 1Protected by Waratek: 21 Low: 103Medium: 1,488High: 869Critical: 273 not blocked: 2,712blocked by ARMR today: 21 No public exploit: 2,342Forecast only: 13Proof of concept only: 252Working exploit published: 89Exploited: 37
19981 Not applicable1 High1 not blocked1 No public exploit1 19990 20000 20011 Not applicable1 High1 not blocked1 No public exploit1 20024 Not applicable4 Medium3 Low1 not blocked4 Working exploit published1 No public exploit3 20031 Not applicable1 High1 not blocked1 Working exploit published1 20041 Not applicable1 High1 not blocked1 Working exploit published1 20057 Not applicable7 High3 Medium4 not blocked7 Working exploit published2 No public exploit5 20067 Not applicable7 High4 Medium3 not blocked7 Working exploit published4 No public exploit3 200712 Not applicable12 High7 Medium5 not blocked12 Exploited1 Working exploit published6 No public exploit5 200812 Not applicable12 High7 Medium5 not blocked12 Working exploit published7 No public exploit5 200917 Not applicable17 High7 Medium10 not blocked17 Working exploit published9 No public exploit8 201012 Not applicable12 High7 Medium5 not blocked12 Working exploit published5 No public exploit7 201110 Not applicable10 High4 Medium3 Low3 not blocked10 Working exploit published4 No public exploit6 20127 Not applicable7 High2 Medium5 not blocked7 No public exploit7 20136 Not applicable6 High1 Medium5 not blocked6 No public exploit6 201419 Not applicable19 High5 Medium14 not blocked19 Working exploit published5 No public exploit14 201522 Not applicable22 High5 Medium16 Low1 not blocked22 Working exploit published6 No public exploit16 201624 Not applicable24 Critical16 High4 Medium2 Low2 not blocked24 Working exploit published1 No public exploit23 201768 Protected by Waratek1 No exploit published4 Not applicable63 Critical15 High32 Medium20 Low1 blocked by ARMR today1 not blocked67 Exploited1 Working exploit published4 No public exploit63 2018109 Mitigation candidate1 No exploit published9 Not applicable99 Critical24 High40 Medium45 not blocked109 Exploited2 Working exploit published3 Proof of concept only1 Forecast only1 No public exploit102 2019251 Protected by Waratek2 No exploit published16 Outside Waratek scope1 Not applicable232 Critical24 High63 Medium158 Low6 blocked by ARMR today2 not blocked249 Exploited3 Working exploit published5 Proof of concept only1 No public exploit242 2020322 Protected by Waratek2 Mitigation candidate5 No exploit published21 Outside Waratek scope1 Not applicable293 Critical36 High102 Medium178 Low6 blocked by ARMR today2 not blocked320 Exploited4 Working exploit published6 Proof of concept only3 Forecast only1 No public exploit308 2021241 Protected by Waratek3 No exploit published32 Outside Waratek scope1 Not applicable205 Critical18 High67 Medium145 Low11 blocked by ARMR today3 not blocked238 Exploited4 Working exploit published2 Proof of concept only1 Forecast only3 No public exploit231 2022269 Protected by Waratek6 Mitigation candidate2 No exploit published40 Not applicable221 Critical35 High72 Medium155 Low7 blocked by ARMR today6 not blocked263 Exploited2 Working exploit published11 Proof of concept only27 Forecast only3 No public exploit226 2023274 Protected by Waratek1 Mitigation candidate1 No exploit published31 Outside Waratek scope1 Not applicable240 Critical31 High81 Medium154 Low8 blocked by ARMR today1 not blocked273 Exploited7 Working exploit published3 Proof of concept only112 Forecast only4 No public exploit148 2024232 Protected by Waratek1 Mitigation candidate1 No exploit published46 Not applicable184 Critical31 High64 Medium128 Low9 blocked by ARMR today1 not blocked231 Exploited4 Proof of concept only15 Forecast only1 No public exploit212 2025381 Protected by Waratek4 Rule in development1 Mitigation candidate2 No exploit published140 Not applicable234 Critical10 High112 Medium242 Low17 blocked by ARMR today4 not blocked377 Exploited2 Working exploit published3 Proof of concept only28 No public exploit348 2026423 Protected by Waratek1 No exploit published11 Outside Waratek scope2 Not applicable409 Critical33 High176 Medium183 Low31 blocked by ARMR today1 not blocked422 Exploited7 Proof of concept only64 No public exploit352
1999200220052008201120142017202020232026
2,733 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 28 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-11379 Medium 2026-06-25 Not applicable No public exploit GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow a user with Developer role to exfiltrate DAST site profile secrets under certain conditions.
CVE-2026-10712 High 2026-06-25 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an unauthenticated user to execute arbitrary JavaScript in a user's browser session due to improper path validation under certain conditions.
CVE-2026-10086 High 2026-06-25 Not applicable No public exploit GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute arbitrary client-side code in the context of another user's session, due to improper sanitization of user-supplied input.
CVE-2026-0934 Low 2026-06-25 Not applicable No public exploit GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with custom role permissions to view, create, or delete protected environment configurations despite CI/CD visibility being disabled for the project.
CVE-2026-57293 Medium 2026-06-24 No exploit published No public exploit An incorrect permission check in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credentials IDs of credentials stored in Jenkins.
CVE-2026-57292 Medium 2026-06-24 No exploit published No public exploit A cross-site request forgery (CSRF) vulnerability in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method.
CVE-2026-57291 Medium 2026-06-24 No exploit published No public exploit Missing permission checks in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allow attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method.
CVE-2026-57286 Medium 2026-06-24 No exploit published No public exploit A missing permission check in Jenkins Git Parameter Plugin 462.vdcf3df2ed2ca_ and earlier allows attackers with Item/Read permission to obtain information about the SCM repository used by a job, such as branch names, tag names, and revision metadata.
CVE-2026-57285 Medium 2026-06-24 No exploit published No public exploit A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration.
CVE-2026-57282 Medium 2026-06-24 No exploit published No public exploit Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded into a generated SSH wrapper script, allowing attackers able to control the name of a build's working directory to execute arbitrary operating system commands on the agent.
CVE-2026-11745 High 2026-06-22 No exploit published Proof of concept only A vulnerability has been identified in centraldogma-server-mirror-git versions prior to 0.84.0, where the Git mirror SSH client does not verify remote host keys for git+ssh:// connections, allowing an on-path attacker to perform man-in-the-middle attacks and compromise mirrored repositories.
CVE-2025-66389 High 2026-06-22 Not applicable No public exploit GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there is indirect prompt injection.
CVE-2026-50519 High 2026-06-19 Not applicable No public exploit Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
CVE-2026-9694 Medium 2026-06-11 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions, could have allowed an unauthenticated user to impersonate the GitLab Support Bot and inject arbitrary content via a specially crafted Service Desk email reply due to improper neutralization in email template processing.
CVE-2026-9204 Medium 2026-06-11 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to read arbitrary files from the Gitaly server and access internal network resources during repository import, due to insufficient validation of secondary URLs.
CVE-2026-8589 High 2026-06-11 Not applicable No public exploit GitLab has remediated an issue in GitLab EE affecting all versions from 13.1.4 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to add unauthorized email addresses to a targeted user's account due to improper sanitization of user-supplied input in certain group setting fields.
CVE-2026-7250 High 2026-06-11 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper input validation in the API request parsing middleware.
CVE-2026-6976 Low 2026-06-11 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to hide changes from merge request diff views due to improper input handling of file names.
CVE-2026-6277 Medium 2026-06-11 Not applicable No public exploit GitLab has remediated an issue in GitLab EE affecting all versions from 13.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with Security Manager-role permissions to manage project security configuration even when the relevant feature was in a disabled state, due to incorrect authorization enforcement.
CVE-2026-6269 Medium 2026-06-11 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to modify hidden merge requests due to incorrect authorization enforcements.
CVE-2026-3553 Low 2026-06-11 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to access confidential issue details due to incorrect authorization checks.
CVE-2026-1500 Medium 2026-06-11 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to cause denial of service due to uncontrolled resource consumption when processing a specially crafted file upload.
CVE-2026-10733 Medium 2026-06-11 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that could have allowed an authenticated user to cause denial of service on the CI/CD Catalog page due to improper sanitization.
CVE-2026-10087 High 2026-06-11 Not applicable No public exploit GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute arbitrary client-side code on behalf of a targeted user due to improper input sanitization in the Analytics Dashboard.
CVE-2026-21837 High 2026-06-05 Not applicable No public exploit HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API.  An attacker may execute arbitrary operating system commands, typically inheriting the privileges of the vulnerable application, which could possibly lead to a complete system takeover and data compromise.
CVE-2026-21826 Medium 2026-06-05 Not applicable No public exploit HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection.  An attacker can manipulate the Host header and cause the application to behave in unexpected ways.
CVE-2026-21825 Medium 2026-06-05 Not applicable No public exploit HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center.  An attacker could execute arbitrary JavaScript in the victim's browser.
CVE-2026-48827 High 2026-06-01 Protected by Waratek No public exploit Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload-pack, git-receive-pack, and other git operations allows users authenticated over SSH access to git repositories outside the configured git server root directory. Applications are affected if they use org.apache.sshd:sshd-git. Applications not using sshd-git are not affected. Users are advised to upgrade affected applications to Apche MINA SSHD 2.18.0, which fixes the issue. The issue also is present in the pre-release milestones 3.0.0-M1 to 3.0.0-M3 for a new upcoming new major version 3.0.0. Again, applications are affected only if they use sshd-git. Upgrade affected applications to 3.0.0-M4. We would like to point out that a professional git server should not rely solely on file system layout and permissions, but should implement additional security controls to govern access to git repositories and operations allowed on particular git repositories.
CVE-2026-24092 High 2026-06-01 Not applicable No public exploit Memory Corruption when processing fastboot commands to set display mode.
CVE-2026-24091 High 2026-06-01 Not applicable No public exploit Memory corruption while processing fastboot commands with improperly formatted input.
CVE-2026-24090 High 2026-06-01 Not applicable No public exploit Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
CVE-2026-24089 High 2026-06-01 Not applicable No public exploit Memory corruption while processing fastboot commands with invalid input.
CVE-2026-24088 High 2026-06-01 Not applicable No public exploit Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
CVE-2026-24087 High 2026-06-01 Not applicable No public exploit Memory corruption while processing fastboot OEM commands.
CVE-2026-24085 High 2026-06-01 Not applicable No public exploit Memory Corruption when processing display command line information due to improper initialization of a variable.
CVE-2025-59610 Medium 2026-06-01 Not applicable No public exploit Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
CVE-2025-59609 Medium 2026-06-01 Not applicable No public exploit Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
CVE-2025-59606 High 2026-06-01 Not applicable No public exploit Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.
CVE-2025-59604 High 2026-06-01 Not applicable No public exploit Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
CVE-2026-9807 Medium 2026-05-28 Not applicable Proof of concept only GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed a blocked Project Access Token to continue accessing private resources due to incorrect authorization enforcement.
CVE-2026-8716 Medium 2026-05-27 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed an authenticated user to access CI data from a different ref type than intended.
CVE-2026-6713 Medium 2026-05-27 Not applicable Proof of concept only GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed an unauthorized user to enumerate private projects due to incorrect authorization checks.
CVE-2026-5296 Medium 2026-05-27 Not applicable No public exploit GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that when foundational flows were enabled at the group level, could have allowed an authenticated user with developer-role permissions to bypass flow restrictions under certain conditions.
CVE-2026-48925 Medium 2026-05-27 No exploit published No public exploit A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.
CVE-2026-4868 High 2026-05-27 Not applicable No public exploit GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that, under certain conditions, could have allowed an authenticated user to cause specific Duo AI workflows to run under another user's identity due to improper user identity resolution when triggering Duo AI workflow runners.
CVE-2026-45571 Medium 2026-05-27 Not applicable No public exploit go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, a path validation issue in go-git could allow crafted repository data to affect files outside the intended checkout target, including the repository's .git directory. These validations were introduced in upstream Git years ago, so the vulnerability arose from go-git drifting from those checks. This vulnerability is fixed in 5.19.1 and 6.0.0-alpha.4.
CVE-2026-45570 Low 2026-05-27 Not applicable No public exploit go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, go-git's SSH transport constructs the remote exec command by wrapping the repository path in single quotes without escaping single quotes embedded inside the path. A repository path containing a single quote can therefore break out of the quoted region in the exec command and be appended as additional shell tokens. This vulnerability is fixed in 5.19.1 and 6.0.0-alpha.4.
CVE-2026-45022 High 2026-05-27 Not applicable No public exploit go-git is an extensible git implementation library written in pure Go. Prior to 5.19.0 and 6.0.0-alpha.3, go-git may parse malformed Git objects in a way that differs from upstream Git. When commit or tag objects contain ambiguous or malformed headers, go-git’s decoded representation may expose values differently from how Git itself would interpret or reject the same object. Additionally, go-git’s commit signing and verification logic operates over commit data reconstructed from go-git’s parsed representation rather than the original raw object bytes. As a result, go-git may sign or verify a commit payload that is not byte-for-byte equivalent to the object stored in the repository. This can cause a signature to appear valid for a commit whose displayed or effective metadata differs from the object that was intended to be signed. This vulnerability is fixed in 5.19.0 and 6.0.0-alpha.3.
CVE-2026-2601 Medium 2026-05-27 Not applicable Proof of concept only GitLab has remediated an issue in GitLab EE affecting all versions from 11.5 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to access sensitive deployment data on projects due to improper authorization checks.
CVE-2026-1402 Medium 2026-05-27 Not applicable Proof of concept only GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed an authenticated user to cause denial of service due to insufficient validation.
CVE-2018-25332 Critical 2026-05-17 Not applicable Proof of concept only GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret token generation and insecure file upload functionality. Attackers can brute-force the Blowfish encryption key, upload a malicious JAR plugin via the git-lfs endpoint, and execute system commands through an exposed exploit endpoint.
CVE-2026-8280 Medium 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to cause denial of service through excessive memory consumption due to improper input validation.
CVE-2026-8144 Medium 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with project membership to enumerate private group members due to missing authorization checks.
CVE-2026-7481 High 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with developer-role permissions to execute arbitrary JavaScript in other users' browsers due to improper input sanitization.
CVE-2026-7471 Low 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with control of a virtual registry upstream to make requests to internal hosts due to improper validation.
CVE-2026-7377 High 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that, in customizable analytics dashboards, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users' browsers due to improper input sanitization.
CVE-2026-6883 Medium 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab EE affecting all versions from 15.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to bypass merge request approval requirements due to improper cleanup of orphaned policy records.
CVE-2026-6335 Medium 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.3 that under certain conditions could have allowed an authenticated user to execute arbitrary code in another user's browser session due to improper sanitization.
CVE-2026-6073 High 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to execute arbitrary JavaScript in other users' browsers due to improper input sanitization.
CVE-2026-6063 Medium 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that under certain conditions could have allowed an authenticated user with developer-role permissions to remove code owner approval rules from merge requests due to improper access control.
CVE-2026-4527 Medium 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to create unauthorized Jira subscriptions for a targeted user's namespace via a specially crafted link due to missing CSRF protection.
CVE-2026-4524 Medium 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to access confidential issue content in public projects without proper authorization due to improper authorization checks.
CVE-2026-3607 Medium 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with developer-role permissions to bypass package protection rules due to improper access control.
CVE-2026-3160 Medium 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to view Jira issues outside the configured project scope due to an integration filter functioning only as a display control rather than enforcing access boundaries as specified.
CVE-2026-3074 Medium 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to download private debugging symbols from inaccessible projects due to improper access control.
CVE-2026-3073 Medium 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with developer-role permissions to bypass PyPI package protection rules and upload restricted packages due to improper authorization checks.
CVE-2026-2900 Low 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab EE affecting all versions from 16.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that when instance-level approval rule editing prevention was enabled, could have allowed an authenticated user with Maintainer permissions to modify or delete project approval rules due to missing authorization checks.
CVE-2026-1659 High 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted requests due to insufficient input validation.
CVE-2026-1338 Medium 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with developer-role permissions to delete protected container registry tags due to improper authorization checks.
CVE-2026-1322 High 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with a read_api scoped OAuth application to create issues and add comments to issues in private projects due to improper authorization.
CVE-2026-1184 High 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab EE affecting all versions from 11.9 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by uploading a specially crafted file due to improper validation.
CVE-2025-14870 High 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted JSON payloads due to insufficient input validation.
CVE-2025-14869 High 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted payloads on certain API endpoints.
CVE-2025-13874 Medium 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with Guest permissions to view issues in projects they were not authorized to access.
CVE-2025-12669 Medium 2026-05-14 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to inject HTML and JavaScript into email notifications sent to other users due to improper input sanitization.
CVE-2026-45321 Critical 2026-05-12 Not applicable Exploited On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target "Pwn Request" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-stealing malware under a trusted identity. Each affected package received exactly two malicious versions, published a few minutes apart.
CVE-2026-41506 High 2026-05-08 Not applicable No public exploit go-git is an extensible git implementation library written in pure Go. Prior to versions 5.18.0 and 6.0.0-alpha.2, go-git may leak HTTP authentication credentials when following redirects during smart-HTTP clone and fetch operations. This issue has been patched in versions 5.18.0 and 6.0.0-alpha.2.
CVE-2026-44244 High 2026-05-07 Not applicable Proof of concept only GitPython is a python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.set_value() passes values to Python's configparser without validating for newlines. GitPython's own _write() converts embedded newlines into indented continuation lines (e.g. \n becomes \n\t), but Git still accepts an indented [core] stanza as a section header — so the injected core.hooksPath becomes effective configuration. Any Git operation that invokes hooks (commit, merge, checkout) will then execute scripts from the attacker-controlled path. This issue has been patched in version 3.1.49.
CVE-2026-44243 High 2026-05-07 Not applicable Proof of concept only GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application using GitPython to write, overwrite, move, or delete files outside the repository’s .git directory via insufficient validation of reference paths in reference creation, rename, and delete operations. This issue has been patched in version 3.1.48.
CVE-2026-42284 Critical 2026-05-07 Not applicable Proof of concept only GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split(" ".join(multi_options)). A string like "--branch main --config core.hooksPath=/x" passes validation (starts with --branch), but after split becomes ["--branch", "main", "--config", "core.hooksPath=/x"]. Git applies the config and executes attacker hooks during clone. This issue has been patched in version 3.1.47.
CVE-2026-42215 High 2026-05-07 Not applicable Proof of concept only GitPython is a python library used to interact with Git repositories. From version 3.1.30 to before version 3.1.47, GitPython blocks dangerous Git options such as --upload-pack and --receive-pack by default, but the equivalent Python kwargs upload_pack and receive_pack bypass that check. If an application passes attacker-controlled kwargs into Repo.clone_from(), Remote.fetch(), Remote.pull(), or Remote.push(), this leads to arbitrary command execution even when allow_unsafe_options is left at its default value of False. This issue has been patched in version 3.1.47.
CVE-2026-24082 High 2026-05-04 Not applicable No public exploit Memory Corruption when copying data from a freed source while executing performance counter deselect operation.
CVE-2025-47404 High 2026-05-04 Not applicable No public exploit Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
CVE-2025-47403 High 2026-05-04 Not applicable No public exploit Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
CVE-2025-47401 High 2026-05-04 Not applicable No public exploit Transient DOS when processing target power rate tables during channel configuration.
CVE-2026-42523 Critical 2026-04-29 No exploit published No public exploit Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook trigger for GITScm polling", resulting in a stored cross-site scripting (XSS) vulnerability exploitable by non-anonymous attackers with Overall/Read permission.
CVE-2026-42522 Medium 2026-04-29 No exploit published No public exploit A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL with attacker-specified GitHub App credentials.
CVE-2026-6951 High 2026-04-25 Not applicable Proof of concept only Versions of the package simple-git before 3.36.0 are vulnerable to Remote Code Execution (RCE) due to an incomplete fix for [CVE-2022-25912](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-3112221) that blocks the -c option but not the equivalent --config form. If untrusted input can reach the options argument passed to simple-git, an attacker may still achieve remote code execution by enabling protocol.ext.allow=always and using an ext:: clone source.
CVE-2026-6515 Medium 2026-04-22 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed a user to use invalidated or incorrectly scoped credentials to access Virtual Registries under certain conditions.
CVE-2026-5816 High 2026-04-22 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.4 and 18.11 before 18.11.1 that could have allowed an unauthenticated user to execute arbitrary JavaScript in a user's browser session due to improper path validation under certain conditions.
CVE-2026-5377 Medium 2026-04-22 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that could have allowed an authenticated user to access titles of confidential or private issues in public projects due to improper access control in the issue description rendering process.
CVE-2026-5262 High 2026-04-22 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.1.0 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain conditions could have allowed an unauthenticated user to access tokens in the Storybook development environment due to improper input validation.
CVE-2026-4922 High 2026-04-22 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an unauthenticated user to execute GraphQL mutations on behalf of authenticated users due to insufficient CSRF protection.
CVE-2026-3254 Low 2026-04-22 Not applicable No public exploit GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that under certain conditions could have allowed an authenticated user to load unauthorized content into another user's browser due to improper input validation in the Mermaid sandbox.
CVE-2026-1660 Medium 2026-04-22 Not applicable Proof of concept only GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain conditions could have allowed an authenticated user to cause denial of service when importing issues due to improper input validation.
CVE-2025-9957 Low 2026-04-22 Not applicable Proof of concept only GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain conditions could have allowed an authenticated user with project owner permissions to bypass group fork prevention settings due to improper authorization checks.
CVE-2025-6016 Medium 2026-04-22 Not applicable Proof of concept only GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service due to insufficient resource allocation limits when retrieving notes under certain conditions.
CVE-2025-3922 Medium 2026-04-22 Not applicable Proof of concept only GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.4 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service by overwhelming system resources under certain conditions due to insufficient resource allocation limits in the GraphQL API.
CVE-2025-0186 Medium 2026-04-22 Not applicable Proof of concept only GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service under certain conditions by exhausting server resources by making crafted requests to a discussions endpoint.
CVE-2026-32604 Critical 2026-04-20 No exploit published No public exploit Spinnaker is an open source, multi-cloud continuous delivery platform. In versions prior to 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2, a bad actor can execute arbitrary commands very simply on the clouddriver pods. This can expose credentials, remove files, or inject resources easily. Versions 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2 contain a patch. As a workaround, disable the gitrepo artifact types.
‹ prev page 3 of 28 next ›