Homepage

commercial-gitlab-rails-ee-19.1

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the commercial-gitlab-rails-ee-19.1 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
CVE-2026-19534

<19.1.7-r3
  • L
GHSA-5j4c-8p2g-v4jx

<19.1.7-r3
  • L
GHSA-28wg-ghj8-5hjv

<19.1.7-r3
  • L
Inefficient Regular Expression Complexity

<19.1.7-r3
  • L
Improper Certificate Validation

<19.1.7-r3
  • L
GHSA-3jxr-9vmj-r5cp

<19.1.7-r3
  • L
GHSA-6688-9rhm-gjv2

<19.1.7-r3
  • L
GHSA-rx4f-c7p8-82vq

<19.1.7-r3
  • L
Directory Traversal

<19.1.7-r3
  • L
GHSA-w293-vg96-wgc3

<19.1.7-r3
  • M
CVE-2026-84947

<19.1.7-r3
  • L
GHSA-x5fp-wj9c-mxmx

<19.1.7-r3
  • M
Arbitrary Code Injection

<19.1.7-r3
  • L
GHSA-qw65-cvwx-89v3

<19.1.7-r3
  • L
GHSA-frvp-7c67-39w9

<19.1.7-r3
  • L
GHSA-wwfh-h76j-fc44

<19.1.7-r3
  • L
Improper Encoding or Escaping of Output

<19.1.7-r3
  • M
CVE-2026-16728

<19.1.7-r3
  • L
CVE-2026-41149

<19.1.7-r3
  • L
Reliance on Untrusted Inputs in a Security Decision

<19.1.7-r3
  • L
GHSA-8436-99hf-9mmv

<19.1.7-r3
  • L
GHSA-6j4f-fj2g-mc7p

<19.1.7-r3
  • L
Cross-site Scripting (XSS)

<19.1.7-r3
  • L
CVE-2026-9697

<19.1.7-r3
  • L
Directory Traversal

<19.1.7-r3
  • L
CVE-2026-102422

<19.1.7-r3
  • L
GHSA-vfj7-8cjw-p6xm

<19.1.7-r3
  • L
GHSA-2v37-7h3g-55p8

<19.1.7-r3
  • L
Unintended Proxy or Intermediary ('Confused Deputy')

<19.1.7-r3
  • L
HTTP Request Smuggling

<19.1.7-r3
  • L
CVE-2026-12151

<19.1.7-r3
  • L
GHSA-8xcm-r25x-g524

<19.1.7-r3
  • L
GHSA-fxqj-rqcc-2cmp

<19.1.7-r3
  • L
Uncaught Exception

<19.1.7-r3
  • M
Directory Traversal

<19.1.7-r3
  • L
GHSA-86w9-cpqp-85rv

<19.1.7-r3
  • L
CVE-2026-8723

<19.1.7-r3
  • L
GHSA-w62v-xxxg-mg59

<19.1.7-r3
  • H
Improper Verification of Cryptographic Signature

<19.1.7-r3
  • L
GHSA-fgmj-fm8m-jvvx

<19.1.7-r3
  • C
Directory Traversal

<19.1.7-r3
  • L
GHSA-w9m9-85wc-3x92

<19.1.7-r3
  • L
GHSA-v422-hmwv-36x6

<19.1.7-r3
  • H
Use of Uninitialized Resource

<19.1.7-r3
  • L
GHSA-xcj9-5m2h-648r

<19.1.7-r3
  • L
GHSA-pxg6-pf52-xh8x

<19.1.7-r3
  • L
GHSA-3xpg-4rpp-hhhm

<19.1.7-r3
  • L
CVE-2026-11525

<19.1.7-r3
  • L
GHSA-h67p-54hq-rp68

<19.1.7-r3
  • L
GHSA-m8rv-5g2x-5cg5

<19.1.7-r3
  • L
GHSA-crvj-82cr-hjcx

<19.1.7-r3
  • L
GHSA-68fv-2mgg-jv7q

<19.1.7-r3
  • L
GHSA-g3ch-rx76-35fx

<19.1.7-r3
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.7-r3
  • L
Protection Mechanism Failure

<19.1.7-r3
  • L
GHSA-v2hh-gcrm-f6hx

<19.1.7-r3
  • M
CVE-2026-85008

<19.1.7-r3
  • L
Arbitrary Code Injection

<19.1.7-r3
  • L
GHSA-p77w-8qqv-26rm

<19.1.7-r3
  • H
Improper Validation of Specified Quantity in Input

<19.1.7-r3
  • L
Directory Traversal

<19.1.7-r3
  • L
Resource Exhaustion

<19.1.7-r3
  • M
Cross-site Scripting (XSS)

<19.1.7-r3
  • L
GHSA-c8x8-7fp4-3x9w

<19.1.7-r3
  • L
CVE-2024-9506

<19.1.7-r3
  • L
Insufficient Comparison

<19.1.7-r3
  • H
Uncontrolled Recursion

<19.1.7-r3
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.7-r3
  • L
Server-Side Request Forgery (SSRF)

<19.1.7-r3
  • L
GHSA-253c-mchw-3w2r

<19.1.7-r3
  • L
Race Condition

<19.1.7-r3
  • L
GHSA-hmw2-7cc7-3qxx

<19.1.7-r3
  • L
CVE-2026-45249

<19.1.7-r3
  • C
CVE-2026-84961

<19.1.7-r3
  • L
GHSA-2v8p-3f2j-5mp7

<19.1.7-r3
  • L
GHSA-73rr-hh4g-fpgx

<19.1.7-r3
  • C
CVE-2026-13697

<19.1.7-r3
  • L
GHSA-v6wh-96g9-6wx3

<19.1.7-r3
  • L
GHSA-r4gj-5m52-g5wh

<19.1.7-r3
  • L
GHSA-q8mj-m7cp-5q26

<19.1.7-r3
  • L
GHSA-w5hq-g745-h8pq

<19.1.7-r3
  • L
CVE-2024-47764

<19.1.7-r3
  • L
GHSA-p9ff-h696-f583

<19.1.7-r3
  • L
GHSA-p88m-4jfj-68fv

<19.1.7-r3
  • L
CVE-2026-75975

<19.1.7-r3
  • L
Insufficient Comparison

<19.1.7-r3
  • L
GHSA-mghh-pgcx-3jjj

<19.1.7-r3
  • L
GHSA-vh66-26gq-q6x8

<19.1.7-r3
  • M
Improper Resource Shutdown or Release

<19.1.7-r3
  • L
CVE-2026-84292

<19.1.7-r3
  • L
Improper Validation of Specified Quantity in Input

<19.1.7-r3
  • L
Arbitrary Code Injection

<19.1.7-r3
  • M
Cross-site Scripting (XSS)

<19.1.7-r3
  • L
GHSA-4hqw-qxg8-jxx2

<19.1.7-r3
  • L
GHSA-35p6-xmwp-9g52

<19.1.7-r3
  • M
CVE-2026-15157

<19.1.7-r3
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.7-r3
  • L
GHSA-j8rh-479h-cp32

<19.1.7-r3
  • L
Directory Traversal

<19.1.7-r3
  • L
Resource Exhaustion

<19.1.7-r3
  • L
GHSA-f577-qrjj-4474

<19.1.7-r3
  • L
GHSA-4cwx-7wf7-3272

<19.1.7-r3
  • L
Algorithmic Complexity

<19.1.7-r3
  • L
GHSA-xjh9-v7x6-24jw

<19.1.7-r3
  • L
CVE-2026-82562

<19.1.7-r3
  • L
GHSA-g6gw-c38x-mqfc

<19.1.7-r3
  • L
CVE-2026-90711

<19.1.7-r3
  • L
GHSA-j6r3-76f7-8jcv

<19.1.7-r3
  • L
Integer Overflow or Wraparound

<19.1.7-r3
  • L
Resource Exhaustion

<19.1.7-r3
  • L
GHSA-px8p-9vwx-vf98

<19.1.7-r3
  • L
GHSA-4x5r-pxfx-6jf8

<19.1.7-r3
  • L
CVE-2026-82417

<19.1.7-r3
  • H
CVE-2026-85014

<19.1.7-r3
  • L
CVE-2026-18446

<19.1.7-r3
  • L
GHSA-52cp-r559-cp3m

<19.1.7-r3
  • L
GHSA-wgpf-jwqj-8h8p

<19.1.7-r3
  • L
GHSA-6qxp-vccf-f47h

<19.1.7-r3
  • L
GHSA-f65p-4m7j-42xc

<19.1.7-r3
  • L
GHSA-p98j-92pf-mc4p

<19.1.7-r3
  • M
Directory Traversal

<19.1.7-r3
  • L
CVE-2026-18149

<19.1.7-r3
  • L
Information Exposure Through Caching

<19.1.7-r3
  • L
GHSA-cp6q-959q-f8rh

<19.1.7-r3
  • M
Arbitrary Code Injection

<19.1.7-r3
  • L
GHSA-rgw5-rvv9-x895

<19.1.7-r3
  • H
Resource Exhaustion

<19.1.7-r3
  • L
CVE-2026-45822

<19.1.7-r3
  • L
CVE-2026-6321

<19.1.7-r3
  • L
GHSA-hxh3-vqpv-xpqv

<19.1.7-r3
  • L
Arbitrary Code Injection

<19.1.7-r3
  • L
GHSA-2jfj-6hjv-fm6j

<19.1.7-r3
  • L
GHSA-hm8q-7f3q-5f36

<19.1.7-r3
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.7-r3
  • L
GHSA-6623-4q32-82v8

<19.1.7-r3
  • L
GHSA-rfgv-xxqx-mfg5

<19.1.7-r3
  • L
CVE-2026-13676

<19.1.7-r3
  • L
GHSA-rpw4-54j3-4h4q

<19.1.7-r3
  • L
GHSA-96hv-2xvq-fx4p

<19.1.7-r3
  • L
GHSA-2gcr-mfcq-wcc3

<19.1.7-r3
  • L
GHSA-4mjr-xmp4-gh2g

<19.1.7-r3
  • L
GHSA-jxxr-4gwj-5jf2

<19.1.7-r3
  • L
GHSA-54fx-42gc-7vw4

<19.1.7-r3
  • L
GHSA-477h-4r7f-fvrx

<19.1.7-r3
  • L
GHSA-vxpw-j846-p89q

<19.1.7-r3
  • M
HTTP Response Splitting

<19.1.7-r3
  • L
CVE-2026-18540

<19.1.7-r3
  • L
GHSA-jqff-g426-hqxp

<19.1.7-r3
  • L
Directory Traversal

<19.1.7-r3
  • L
GHSA-rhh3-jpg6-66xh

<19.1.7-r3
  • L
GHSA-3rrr-jr9j-h3q3

<19.1.7-r3
  • L
GHSA-vcc3-ghjq-m6fr

<19.1.7-r3
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.7-r3
  • L
GHSA-c29m-xwm3-cm6r

<19.1.7-r3
  • L
Arbitrary Code Injection

<19.1.7-r3
  • L
GHSA-hrr3-gc8f-f4qj

<19.1.7-r3
  • L
GHSA-xrhx-7g5j-rcj5

<19.1.7-r3
  • L
CVE-2026-9678

<19.1.7-r3
  • L
Resource Exhaustion

<19.1.7-r3
  • L
GHSA-gqvv-2mrq-wpjv

<19.1.7-r3
  • L
CVE-2026-74866

<19.1.7-r3
  • L
GHSA-hvrm-45r6-mjfj

<19.1.7-r3
  • H
CVE-2026-6734

<19.1.7-r3
  • L
Resource Exhaustion

<19.1.7-r3
  • L
GHSA-5p4m-2wfm-xmqj

<19.1.7-r3
  • L
GHSA-79qm-7rj5-m7r9

<19.1.7-r3
  • L
GHSA-458j-xx4x-4375

<19.1.7-r3
  • L
GHSA-v39h-62p7-jpjc

<19.1.7-r3
  • L
GHSA-4w7w-66w2-5vf9

<19.1.7-r3
  • L
GHSA-fx2h-pf6j-xcff

<19.1.7-r3
  • L
GHSA-pmjh-fq2x-6v4x

<19.1.7-r3
  • L
GHSA-jr45-8vmc-qm54

<19.1.7-r3
  • M
CVE-2026-16729

<19.1.7-r3
  • L
GHSA-qjx8-664m-686j

<19.1.7-r3
  • L
GHSA-j6c9-x7qj-28xf

<19.1.7-r3
  • L
Resource Exhaustion

<19.1.7-r3
  • L
GHSA-mh99-v99m-4gvg

<19.1.7-r3
  • L
GHSA-848j-6mx2-7j84

<19.1.7-r3
  • L
GHSA-hp3w-g68c-fv3c

<19.1.7-r3
  • H
CVE-2026-45820

<19.1.7-r3
  • L
GHSA-rv63-4mwf-qqc2

<19.1.7-r3
  • H
Resource Exhaustion

<19.1.7-r3
  • L
GHSA-v2v4-37r5-5v8g

<19.1.7-r3
  • L
GHSA-6g55-p6wh-862q

<19.1.7-r3
  • L
CVE-2026-19484

<19.1.7-r3
  • L
GHSA-6m6c-36f7-fhxh

<19.1.7-r3
  • L
GHSA-v2wj-q39q-566r

<19.1.7-r3
  • L
GHSA-82fw-gwwq-j7x9

<19.1.7-r3
  • L
CVE-2026-12143

<19.1.7-r3
  • L
GHSA-m8m8-qj5v-23w3

<19.1.7-r3
  • L
GHSA-9vqf-7f2p-gf9v

<19.1.7-r3
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

<19.1.7-r3
  • L
GHSA-r53p-7pc4-xj5r

<19.1.7-r3
  • L
GHSA-qx2v-qp2m-jg93

<19.1.7-r3
  • L
GHSA-ghcm-xqfw-q4vr

<19.1.7-r3
  • L
GHSA-f23p-vx2j-j53r

<19.1.7-r3
  • L
Arbitrary Code Injection

<19.1.7-r3
  • L
GHSA-73wf-gq98-2v4g

<19.1.7-r3
  • L
Information Exposure

<19.1.7-r3
  • H
CVE-2026-14643

<19.1.7-r3
  • L
Allocation of Resources Without Limits or Throttling

<19.1.7-r3
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.7-r3
  • L
GHSA-3pq3-5fj3-cg6v

<19.1.7-r3
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<19.1.7-r3
  • H
Incorrect Behavior Order: Validate Before Canonicalize

<19.1.7-r3
  • L
GHSA-6fw5-9hq8-w87g

<19.1.7-r3
  • L
CVE-2026-56761

<19.1.7-r3
  • L
Resource Exhaustion

<19.1.7-r3
  • L
CVE-2026-13149

<19.1.7-r3
  • L
GHSA-xgm2-5f3f-mvvc

<19.1.7-r3
  • L
GHSA-x8mw-p69m-v3mx

<19.1.7-r3
  • L
CVE-2024-6783

<19.1.7-r3
  • L
GHSA-jqcg-44mw-7w3h

<19.1.7-r3
  • L
External Control of File Name or Path

<19.1.7-r3
  • L
GHSA-q3j6-qgpj-74h6

<19.1.7-r3
  • L
HTTP Request Smuggling

<19.1.7-r3
  • L
GHSA-qhr7-859c-m2p7

<19.1.7-r3
  • L
GHSA-238p-pmpm-9mq7

<19.1.7-r3
  • L
Cross-site Scripting (XSS)

<19.1.7-r3
  • L
CVE-2026-12590

<19.1.7-r3
  • L
Directory Traversal

<19.1.7-r3
  • L
GHSA-xwg4-73v4-xw9w

<19.1.7-r3
  • L
CVE-2026-76172

<19.1.7-r3
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<19.1.7-r3
  • L
GHSA-58qx-3vcg-4xpx

<19.1.7-r3
  • L
GHSA-6x64-9x62-f2gx

<19.1.7-r3
  • L
GHSA-c83g-rgw3-j3cx

<19.1.7-r3
  • L
GHSA-9fr6-4gfg-395g

<19.1.7-r3
  • L
CVE-2026-6322

<19.1.7-r3
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<19.1.7-r3
  • L
Exposure of Data Element to Wrong Session

<19.1.7-r3
  • L
CVE-2026-102414

<19.1.7-r3
  • L
GHSA-q2hr-2g5m-vwhr

<19.1.7-r3
  • L
GHSA-7mx3-vvmw-hjmv

<19.1.7-r3
  • L
GHSA-v3r7-h72x-cjcm

<19.1.7-r3
  • M
Improper Validation of Specified Quantity in Input

<19.1.7-r3
  • L
Resource Exhaustion

<19.1.7-r3
  • L
CVE-2026-84394

<19.1.7-r3
  • L
Algorithmic Complexity

<19.1.7-r3
  • L
GHSA-2883-xcg3-v3hh

<19.1.7-r3
  • L
GHSA-88fw-hqm2-52qc

<19.1.7-r3
  • L
GHSA-58mr-gqgx-xq4g

<19.1.7-r3
  • L
Overly Permissive Cross-domain Whitelist

<19.1.7-r3
  • L
CVE-2026-16221

<19.1.7-r3
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.7-r3
  • L
GHSA-qp7p-654g-cw7p

<19.1.7-r3
  • L
Insufficient Verification of Data Authenticity

<19.1.7-r3
  • L
Algorithmic Complexity

<19.1.7-r3
  • H
CVE-2026-84933

<19.1.7-r3
  • L
Incorrect Regular Expression

<19.1.7-r3
  • L
Insufficient Verification of Data Authenticity

<19.1.7-r3
  • L
Resource Exhaustion

<19.1.7-r3
  • L
GHSA-x97p-jq2g-jp4f

<19.1.7-r3
  • L
GHSA-69xw-7hcm-h432

<19.1.7-r3
  • L
GHSA-h3mg-xc3c-68pw

<19.1.7-r3
  • L
Use of Less Trusted Source

<19.1.7-r3
  • L
Use of Less Trusted Source

<19.1.7-r3
  • L
GHSA-pr7r-676h-xcf6

<19.1.7-r3
  • L
Resource Exhaustion

<19.1.7-r3
  • L
GHSA-rj75-hqrm-r3gf

<19.1.7-r3
  • L
Inefficient Regular Expression Complexity

<19.1.7-r3
  • L
CVE-2026-19481

<19.1.7-r3
  • L
CVE-2026-9679

<19.1.7-r3
  • L
GHSA-r28c-9q8g-f849

<19.1.7-r3
  • L
CVE-2026-45819

<19.1.7-r3
  • L
GHSA-w5vr-8v7q-w6rv

<19.1.7-r3
  • L
GHSA-gxm5-99cw-xjw9

<19.1.7-r3
  • L
GHSA-c4c3-pg64-4m4v

<19.1.7-r3
  • L
Resource Exhaustion

<19.1.7-r3
  • L
GHSA-87f9-hvmw-gh4p

<19.1.7-r3
  • L
GHSA-2wm5-q62r-hmrv

<19.1.7-r3
  • L
GHSA-44g4-m2mj-wpvx

<19.1.7-r3
  • L
Unintended Proxy or Intermediary ('Confused Deputy')

<19.1.7-r3
  • L
Inefficient Regular Expression Complexity

<19.1.7-r3
  • H
Out-of-bounds Write

<19.1.7-r3
  • L
Resource Exhaustion

<19.1.7-r3
  • L
GHSA-542g-h47m-68v8

<19.1.7-r3
  • L
Cross-site Scripting (XSS)

<19.1.7-r3
  • L
GHSA-3hrh-pfw6-9m5x

<19.1.7-r3
  • L
GHSA-4c8g-83qw-93j6

<19.1.7-r3
  • L
GHSA-g8m3-5g58-fq7m

<19.1.7-r3
  • L
Improper Input Validation

<19.1.7-r3
  • L
GHSA-8j4g-w8fx-2239

<19.1.7-r3
  • L
CVE-2026-84890

<19.1.7-r3
  • L
Unchecked Input for Loop Condition

<19.1.7-r3
  • L
GHSA-g2v6-rqmx-r4w6

<19.1.7-r3
  • L
GHSA-2gqq-gqf2-x968

<19.1.7-r3
  • L
CVE-2025-14505

<19.1.7-r3
  • L
GHSA-7p8r-x3mc-p8w7

<19.1.7-r3
  • L
GHSA-mwp4-54f8-5fhr

<19.1.7-r3
  • L
CVE-2026-6733

<19.1.7-r3
  • L
GHSA-hm92-r4w5-c3mj

<19.1.7-r3
  • L
GHSA-pqg4-j6r4-53mv

<19.1.7-r3
  • L
GHSA-vmh5-mc38-953g

<19.1.7-r3
  • H
Information Exposure

<19.1.7-r3
  • M
Improper Authorization

<19.1.7-r3
  • L
CVE-2026-14257

<19.1.7-r3
  • L
CVE-2026-86472

<19.1.7-r3