Поиск уязвимостей
Количество 4
Количество 4
CVE-2026-14814
GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw repository files, causing targeted users' CI/CD pipelines to execute specially crafted content and potentially exposing protected environment variables, due to improper validation of repository references.
CVE-2026-14814
GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw repository files, causing targeted users' CI/CD pipelines to execute specially crafted content and potentially exposing protected environment variables, due to improper validation of repository references.
GHSA-49c6-8ph4-9vr9
GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw repository files, causing targeted users' CI/CD pipelines to execute specially crafted content and potentially exposing protected environment variables, due to improper validation of repository references.
BDU:2026-16611
Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с использованием регулярного выражения, которое недостаточно ограничивает набор разрешенных значений, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-14814 GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw repository files, causing targeted users' CI/CD pipelines to execute specially crafted content and potentially exposing protected environment variables, due to improper validation of repository references. | CVSS3: 8.2 | 0% Низкий | 26 дней назад |
 | CVE-2026-14814 GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw repository files, causing targeted users' CI/CD pipelines to execute specially crafted content and potentially exposing protected environment variables, due to improper validation of repository references. | CVSS3: 8.2 | 0% Низкий | 26 дней назад |
| GHSA-49c6-8ph4-9vr9 GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw repository files, causing targeted users' CI/CD pipelines to execute specially crafted content and potentially exposing protected environment variables, due to improper validation of repository references. | CVSS3: 8.2 | 0% Низкий | 26 дней назад |
 | BDU:2026-16611 Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с использованием регулярного выражения, которое недостаточно ограничивает набор разрешенных значений, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или выполнить произвольный код | CVSS3: 8.2 | 0% Низкий | 28 дней назад |
Уязвимостей на страницу