Количество 3
Количество 3
CVE-2026-5952
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to bypass package protection rules and overwrite protected Maven package metadata due to incorrect authorization checks.
GHSA-8vj4-48p6-q87m
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to bypass package protection rules and overwrite protected Maven package metadata due to incorrect authorization checks.
BDU:2026-09078
Уязвимость реестра пакетов Maven программной платформы на базе git для совместной работы над кодом GitLab EE/ CE, позволяющая нарушителю обойти существующие механизмы безопасности
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-5952 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to bypass package protection rules and overwrite protected Maven package metadata due to incorrect authorization checks. | CVSS3: 4.3 | 0% Низкий | около 1 месяца назад |
| GHSA-8vj4-48p6-q87m GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to bypass package protection rules and overwrite protected Maven package metadata due to incorrect authorization checks. | CVSS3: 4.3 | 0% Низкий | около 1 месяца назад |
 | BDU:2026-09078 Уязвимость реестра пакетов Maven программной платформы на базе git для совместной работы над кодом GitLab EE/ CE, позволяющая нарушителю обойти существующие механизмы безопасности | CVSS3: 4.3 | 0% Низкий | около 1 месяца назад |
Уязвимостей на страницу