VulniPulse uses Google Ads measurement to understand visits from advertisements and campaign performance. It runs cookie-free until you choose — accepting enables cookies for more accurate attribution. Rejecting keeps it cookie-free and never limits the site.
See exactly what is measuredComplete feed
Advisories the vendor has revised
Silent file attachment via ?attach= parameter. Red Hat rates this moderate (CVSS 6.5).
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.3 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed sensitive information to be written to application logs due to insufficient filtering in a CI/CD API endpoint.
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to bypass package protection rules and overwrite protected Maven package metadata due to incorrect authorization checks.
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with Reporter-level group permissions to view package metadata from projects with the Package Registry disabled due to incorrect authorization checks in the group packages feature.
GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user to read or modify another group's virtual registry cleanup policy settings without authorization.
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.5 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an unauthenticated user to view confidential issue references on public projects due to improper authorization checks.
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.8 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user to conceal content within a Snippet due to improper input validation.
GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow a user with Developer role to exfiltrate DAST site profile secrets under certain conditions.
Denial of Service due to inefficient input parsing. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1050.
symlink following in WriteToCachedFile allows host file overwrite from virt-launcher. Red Hat rates this moderate (CVSS 4.2). Weakness: CWE-61.
SSRF in virt-api port-forward via unvalidated guest-agent-reported IP. Red Hat rates this moderate (CVSS 6.4). Weakness: CWE-918.
fix bulk-out buffer overflow. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-787.
Skip remove_waiter() when waiter is not enqueued. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-476.
Fix DMA and xdp_frame leak on XDP_TX xmit failure. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-772.
allow subflow rcv wnd to shrink. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-131.
fix vector attribute parsing in mrp_pdu_parse_vecattr. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-1285.
clear skb->dev before running a sockmap verdict. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-909.
add bounds checks before ie_length subtraction. Red Hat rates this moderate. Weakness: CWE-191.
add mutex to guard hook reference counting. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-820.
Fix vaddr leak when indirect CSD has zeroed workgroups. Red Hat rates this low (CVSS 5.5). Weakness: CWE-772.