Homepage

gitlab-rails-ce-19.1

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the gitlab-rails-ce-19.1 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Cross-site Scripting (XSS)

<19.1.7-r6
  • L
GHSA-jxrp-r7gx-q4j8

<19.1.7-r6
  • L
Resource Exhaustion

<19.1.8-r8
  • L
GHSA-m8m8-qj5v-23w3

<19.1.8-r8
  • L
CVE-2026-101899

<19.1.8-r8
  • L
GHSA-542g-h47m-68v8

<19.1.8-r8
  • L
GHSA-r4gj-5m52-g5wh

<19.1.8-r8
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.8-r8
  • L
GHSA-j8rh-479h-cp32

<19.1.8-r8
  • L
Resource Exhaustion

<19.1.8-r8
  • L
Arbitrary Code Injection

<19.1.8-r8
  • L
GHSA-c29m-xwm3-cm6r

<19.1.8-r8
  • L
Inefficient Regular Expression Complexity

<19.1.8-r8
  • L
Arbitrary Code Injection

<19.1.8-r8
  • L
GHSA-mghh-pgcx-3jjj

<19.1.8-r8
  • L
Unintended Proxy or Intermediary ('Confused Deputy')

<19.1.8-r8
  • L
Unintended Proxy or Intermediary ('Confused Deputy')

<19.1.8-r8
  • L
Server-Side Request Forgery (SSRF)

<19.1.8-r8
  • L
GHSA-vh66-26gq-q6x8

<19.1.8-r8
  • L
GHSA-4hqw-qxg8-jxx2

<19.1.8-r8
  • L
GHSA-3pq3-5fj3-cg6v

<19.1.8-r8
  • L
GHSA-44g4-m2mj-wpvx

<19.1.8-r8
  • L
GHSA-qhr7-859c-m2p7

<19.1.8-r7
  • L
Resource Exhaustion

<19.1.8-r7
  • L
GHSA-q2hr-2g5m-vwhr

<19.1.8-r7
  • L
GHSA-6j4f-fj2g-mc7p

<19.1.8-r7
  • L
Resource Exhaustion

<19.1.8-r7
  • L
Resource Exhaustion

<19.1.8-r7
  • L
Race Condition

<19.1.8-r6
  • L
CVE-2026-84292

<19.1.8-r6
  • L
GHSA-vp7f-562j-4qgr

<19.1.8-r6
  • L
CVE-2026-84394

<19.1.8-r6
  • L
GHSA-c3rm-3hqr-4qwm

<19.1.8-r6
  • L
Use of Less Trusted Source

<19.1.8-r6
  • L
GHSA-wr3r-jhmc-f6jw

<19.1.8-r6
  • L
Incorrect Authorization

<19.1.8-r6
  • L
GHSA-qw65-cvwx-89v3

<19.1.8-r6
  • L
GHSA-58mr-gqgx-xq4g

<19.1.8-r6
  • L
Improper Validation of Array Index

<19.1.8-r2
  • L
Directory Traversal

<19.1.8-r2
  • L
GHSA-82fw-gwwq-j7x9

<19.1.8-r2
  • L
GHSA-2wm5-q62r-hmrv

<19.1.8-r2
  • L
GHSA-2v4p-qf9q-27wj

<19.1.8-r2
  • L
Inefficient Regular Expression Complexity

<19.1.8-r2
  • L
GHSA-rx8g-88g5-qh64

<19.1.7-r7
  • L
CVE-2025-57352

<19.1.7-r7
  • H
Uncontrolled Recursion

<19.1.7-r6
  • L
GHSA-3mcp-22mf-vrw3

<19.1.7-r6
  • L
GHSA-55q2-fjhq-7xh7

<19.1.7-r6
  • L
GHSA-fq2j-3j99-rx65

<19.1.7-r6
  • L
Cross-site Scripting (XSS)

<19.1.7-r6
  • L
GHSA-c83g-rgw3-j3cx

<19.1.7-r6
  • L
GHSA-38c4-r59v-3vqw

<19.1.7-r6
  • L
GHSA-f23m-r3pf-42rh

<19.1.7-r6
  • L
Algorithmic Complexity

<19.1.7-r6
  • L
CVE-2026-82562

<19.1.7-r6
  • M
Exposed Dangerous Method or Function

<19.1.7-r6
  • L
GHSA-378v-28hj-76wf

<19.1.7-r6
  • L
GHSA-mh29-5h37-fv8m

<19.1.7-r6
  • H
Resource Exhaustion

<19.1.7-r6
  • L
GHSA-q8mj-m7cp-5q26

<19.1.7-r6
  • L
CVE-2026-14620

<19.1.7-r6
  • L
GHSA-qjx8-664m-686j

<19.1.7-r6
  • L
GHSA-rp9w-3fw7-7cwq

<19.1.7-r6
  • L
GHSA-r47g-fvhr-h676

<19.1.7-r6
  • L
GHSA-fqj3-h9pc-443h

<19.1.7-r6
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.7-r6
  • L
GHSA-37ch-88jc-xwx2

<19.1.7-r6
  • L
Inefficient Regular Expression Complexity

<19.1.7-r6
  • L
Resource Exhaustion

<19.1.7-r6
  • L
GHSA-67mh-4wv8-2f99

<19.1.7-r6
  • M
Cross-site Scripting (XSS)

<19.1.7-r6
  • L
CVE-2026-12143

<19.1.7-r6
  • L
GHSA-h67p-54hq-rp68

<19.1.7-r6
  • L
GHSA-4mjr-xmp4-gh2g

<19.1.7-r6
  • L
GHSA-42h9-826w-cgv3

<19.1.7-r6
  • L
Arbitrary Command Injection

<19.1.7-r6
  • L
GHSA-xj6q-8x83-jv6g

<19.1.7-r6
  • L
CVE-2026-12590

<19.1.7-r6
  • L
GHSA-jr5f-v2jv-69x6

<19.1.7-r6
  • H
Allocation of Resources Without Limits or Throttling

<19.1.7-r6
  • L
GHSA-73wf-gq98-2v4g

<19.1.7-r6
  • L
GHSA-gvmj-g25r-r7wr

<19.1.7-r6
  • L
CVE-2026-82417

<19.1.7-r6
  • L
GHSA-wf5p-g6vw-rhxx

<19.1.7-r6
  • L
GHSA-5c6j-r48x-rmvq

<19.1.7-r6
  • M
CVE-2026-9595

<19.1.7-r6
  • L
GHSA-hmw2-7cc7-3qxx

<19.1.7-r6
  • L
Algorithmic Complexity

<19.1.7-r6
  • L
Resource Exhaustion

<19.1.7-r6
  • M
CVE-2025-13465

<19.1.7-r6
  • L
Improper Input Validation

<19.1.7-r6
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.7-r6
  • L
GHSA-6v5v-wf23-fmfq

<19.1.7-r6
  • L
GHSA-23c5-xmqv-rm74

<19.1.7-r6
  • L
GHSA-wf6x-7x77-mvgw

<19.1.7-r6
  • M
Server-Side Request Forgery (SSRF)

<19.1.7-r6
  • L
Server-Side Request Forgery (SSRF)

<19.1.7-r6
  • L
GHSA-qj8w-gfj5-8c6v

<19.1.7-r6
  • L
GHSA-76mc-f452-cxcm

<19.1.7-r6
  • L
GHSA-mwf2-3pr3-8698

<19.1.7-r6
  • L
GHSA-f886-m6hf-6m8v

<19.1.7-r6
  • L
Improper Encoding or Escaping of Output

<19.1.7-r6
  • L
CVE-2024-4068

<19.1.7-r6
  • L
GHSA-vj76-c3g6-qr5v

<19.1.7-r6
  • L
CVE-2026-3449

<19.1.7-r6
  • H
Resource Exhaustion

<19.1.7-r6
  • L
GHSA-xvcm-6775-5m9r

<19.1.7-r6
  • L
GHSA-v6h2-p8h4-qcjw

<19.1.7-r6
  • L
Uncontrolled Recursion

<19.1.7-r6
  • L
GHSA-64mm-vxmg-q3vj

<19.1.7-r6
  • L
GHSA-952p-6rrq-rcjv

<19.1.7-r6
  • L
GHSA-7mvr-c777-76hp

<19.1.7-r6
  • L
GHSA-q7cg-457f-vx79

<19.1.7-r6
  • L
GHSA-jxxr-4gwj-5jf2

<19.1.7-r6
  • L
GHSA-r5fr-rjxr-66jc

<19.1.7-r6
  • C
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.7-r6
  • M
Protection Mechanism Failure

<19.1.7-r6
  • H
CVE-2026-2327

<19.1.7-r6
  • L
GHSA-w9m9-85wc-3x92

<19.1.8-r2
  • L
GHSA-hcpx-6fm6-wx23

<19.1.7-r6
  • L
GHSA-9jgg-88mc-972h

<19.1.7-r6
  • L
GHSA-5p4m-2wfm-xmqj

<19.1.7-r6
  • L
CVE-2026-4867

<19.1.7-r6
  • L
GHSA-mh99-v99m-4gvg

<19.1.7-r6
  • L
CVE-2026-45822

<19.1.7-r6
  • L
CVE-2026-56855

<19.1.7-r6
  • L
GHSA-qx2v-qp2m-jg93

<19.1.7-r6
  • L
CVE-2025-15284

<19.1.7-r6
  • L
GHSA-x4vx-rjvf-j5p4

<19.1.7-r6
  • M
Cross-site Scripting (XSS)

<19.1.7-r6
  • H
Inefficient Regular Expression Complexity

<19.1.7-r6
  • L
GHSA-96hv-2xvq-fx4p

<19.1.7-r6
  • L
CVE-2026-14257

<19.1.7-r6
  • H
Directory Traversal

<19.1.7-r6
  • H
Resource Exhaustion

<19.1.7-r6
  • L
GHSA-7fh5-64p2-3v2j

<19.1.7-r6
  • L
GHSA-5j98-mcp5-4vw2

<19.1.7-r6
  • L
GHSA-grv7-fg5c-xmjg

<19.1.7-r6
  • H
Arbitrary Code Injection

<19.1.7-r6
  • M
Origin Validation Error

<19.1.7-r6
  • M
Improper Resource Shutdown or Release

<19.1.8-r2
  • L
GHSA-pmv8-rq9r-6j72

<19.1.7-r6
  • L
GHSA-3ppc-4f35-3m26

<19.1.7-r6
  • L
Resource Exhaustion

<19.1.7-r6
  • L
GHSA-jqh4-m9w3-8hp9

<19.1.7-r6
  • M
Resource Exhaustion

<19.1.7-r6
  • L
Directory Traversal

<19.1.7-r6
  • L
Algorithmic Complexity

<19.1.7-r6
  • L
GHSA-76c9-3jph-rj3q

<19.1.7-r6
  • L
GHSA-6g55-p6wh-862q

<19.1.7-r6
  • L
GHSA-ph9p-34f9-6g65

<19.1.7-r6
  • L
External Control of File Name or Path

<19.1.7-r6
  • L
GHSA-6hqm-hm2v-3p2p

<19.1.7-r6
  • L
GHSA-vxr8-fq34-vvx9

<19.1.7-r6
  • M
CVE-2024-4067

<19.1.7-r6
  • H
Use of Uninitialized Resource

<19.1.7-r6
  • L
GHSA-4x5r-pxfx-6jf8

<19.1.8-r3
  • L
Cross-site Scripting (XSS)

<19.1.7-r6
  • L
GHSA-x5fp-wj9c-mxmx

<19.1.7-r6
  • C
CVE-2026-4800

<19.1.7-r6
  • L
Uncaught Exception

<19.1.7-r6
  • L
GHSA-v56q-mh7h-f735

<19.1.7-r6
  • L
Cross-site Scripting (XSS)

<19.1.7-r6
  • L
Directory Traversal

<19.1.7-r6
  • L
GHSA-7r86-cg39-jmmj

<19.1.7-r6
  • L
GHSA-vp52-pcj8-j9qc

<19.1.7-r6
  • M
Improper Verification of Cryptographic Signature

<19.1.7-r6
  • L
GHSA-mx8g-39q3-5c79

<19.1.7-r6
  • L
GHSA-2g4f-4pwh-qvx6

<19.1.7-r6
  • M
Arbitrary Code Injection

<19.1.7-r6
  • L
Server-Side Request Forgery (SSRF)

<19.1.7-r6
  • L
GHSA-m28w-2pqf-7qgj

<19.1.7-r6
  • L
GHSA-vpq2-c234-7xj6

<19.1.7-r6
  • L
Algorithmic Complexity

<19.1.7-r6
  • L
Algorithmic Complexity

<19.1.7-r6
  • L
GHSA-mmx7-hfxf-jppx

<19.1.7-r6
  • L
GHSA-v422-hmwv-36x6

<19.1.7-r6
  • H
Resource Exhaustion

<19.1.7-r6
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.7-r6
  • L
GHSA-8fgc-7cc6-rx7x

<19.1.7-r6
  • L
GHSA-4ww2-rjh2-xpv9

<19.1.7-r6
  • C
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.7-r6
  • L
Uncaught Exception

<19.1.7-r6
  • L
GHSA-r292-9mhp-454m

<19.1.7-r6
  • L
Integer Overflow or Wraparound

<19.1.7-r6
  • L
GHSA-4v9v-hfq4-rm2v

<19.1.7-r6
  • L
GHSA-hpcv-96wg-7vj8

<19.1.7-r6
  • L
Inefficient Regular Expression Complexity

<19.1.7-r6
  • L
CVE-2026-2739

<19.1.7-r6
  • L
Inefficient Regular Expression Complexity

<19.1.7-r6
  • H
Out-of-bounds Write

<19.1.7-r6
  • L
GHSA-rgw5-rvv9-x895

<19.1.7-r6
  • L
GHSA-r28c-9q8g-f849

<19.1.7-r6
  • L
GHSA-79cf-xcqc-c78w

<19.1.7-r6
  • H
Information Exposure

<19.1.7-r6
  • L
GHSA-52cp-r559-cp3m

<19.1.7-r6
  • L
CVE-2026-13149

<19.1.7-r6
  • L
Directory Traversal

<19.1.7-r6
  • L
Resource Exhaustion

<19.1.7-r6
  • H
CVE-2026-2391

<19.1.7-r6
  • L
CVE-2026-78662

<19.1.7-r6
  • M
Directory Traversal

<19.1.7-r6
  • L
CVE-2026-8723

<19.1.7-r6
  • L
GHSA-w7fw-mjwx-w883

<19.1.7-r6
  • M
CVE-2026-2950

<19.1.7-r6
  • L
GHSA-fv7c-fp4j-7gwp

<19.1.7-r6
  • L
GHSA-v6wh-96g9-6wx3

<19.1.7-r6
  • L
GHSA-6rw7-vpxm-498p

<19.1.7-r6
  • L
GHSA-p498-v437-472g

<19.1.7-r6
  • L
GHSA-48c2-rrv3-qjmp

<19.1.7-r6
  • L
GHSA-cmwh-pvxp-8882

<19.1.7-r6
  • L
GHSA-gcfj-64vw-6mp9

<19.1.7-r6
  • L
Allocation of Resources Without Limits or Throttling

<19.1.7-r6
  • L
GHSA-68jp-44vc-2x5h

<19.1.7-r6
  • L
Directory Traversal

<19.1.8-r3
  • C
Directory Traversal

<19.1.7-r6
  • H
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.7-r6
  • L
GHSA-8cj5-5rvv-wf4v

<19.1.7-r6
  • L
GHSA-c27g-q93r-2cwf

<19.1.7-r6
  • L
GHSA-9wx3-p993-35vp

<19.1.7-r6
  • L
GHSA-v245-v573-v5vm

<19.1.7-r6
  • L
GHSA-f5vj-f2hx-8m93

<19.1.7-r6
  • M
CVE-2026-6402

<19.1.7-r6
  • L
GHSA-c2j3-45gr-mqc4

<19.1.7-r6
  • L
CVE-2025-7339

<19.1.7-r6
  • L
GHSA-fxqj-rqcc-2cmp

<19.1.7-r6
  • L
GHSA-f2r5-pqh9-r8f8

<19.1.7-r6
  • H
Resource Exhaustion

<19.1.7-r6
  • H
Permissive Whitelist

<19.1.7-r6
  • M
Cross-site Scripting (XSS)

<19.1.7-r6
  • L
GHSA-rf6f-7fwh-wjgh

<19.1.7-r6
  • L
GHSA-3jxr-9vmj-r5cp

<19.1.7-r6
  • L
GHSA-vcc3-ghjq-m6fr

<19.1.7-r6
  • L
GHSA-fx2h-pf6j-xcff

<19.1.7-r6
  • L
GHSA-f4gw-2p7v-4548

<19.1.7-r6
  • L
GHSA-jmr9-qjv8-65gv

<19.1.7-r6
  • L
GHSA-968p-4wvh-cqc8

<19.1.7-r6
  • L
OS Command Injection

<19.1.7-r6
  • L
Resource Exhaustion

<19.1.7-r6
  • L
GHSA-7q8q-rj6j-mhjq

<19.1.7-r6
  • L
GHSA-xxjr-mmjv-4gpg

<19.1.7-r6
  • H
Cross-site Scripting (XSS)

<19.1.7-r6
  • M
Cross-site Request Forgery (CSRF)

<19.1.7-r6
  • L
GHSA-58qx-3vcg-4xpx

<19.1.7-r6
  • L
Resource Exhaustion

<19.1.7-r6
  • M
Trust Boundary Violation

<19.1.7-r6
  • L
GHSA-39j5-w47m-2gmv

<19.1.7-r6
  • L
CVE-2026-56876

<19.1.7-r6
  • L
CVE-2026-14631

<19.1.7-r6
  • L
GHSA-38r7-794h-5758

<19.1.7-r6
  • L
GHSA-w5hq-g745-h8pq

<19.1.7-r6
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.7-r6
  • L
Directory Traversal

<19.1.7-r6
  • L
GHSA-6gmq-8vp8-gcm6

<19.1.7-r6
  • L
GHSA-7p8r-x3mc-p8w7

<19.1.7-r4
  • L
GHSA-v39h-62p7-jpjc

<19.1.7-r4
  • L
CVE-2026-75975

<19.1.7-r4
  • L
GHSA-f65p-4m7j-42xc

<19.1.7-r4
  • L
CVE-2026-18446

<19.1.7-r4
  • L
CVE-2026-6322

<19.1.7-r4
  • L
CVE-2026-13676

<19.1.7-r4
  • L
GHSA-q3j6-qgpj-74h6

<19.1.7-r4
  • L
GHSA-v2hh-gcrm-f6hx

<19.1.7-r4
  • L
GHSA-4c8g-83qw-93j6

<19.1.7-r4
  • L
GHSA-jqff-g426-hqxp

<19.1.7-r4
  • L
CVE-2026-6321

<19.1.7-r4
  • L
CVE-2026-76172

<19.1.7-r4
  • L
CVE-2026-16221

<19.1.7-r4
  • L
GHSA-36jr-mh4h-2g58

<19.1.7-r2
  • L
GHSA-hc8v-wwc9-vgxm

<19.1.3-r8
  • L
Link Following

<19.1.3-r8
  • L
GHSA-qgq7-7hm3-q39j

<19.1.3-r8
  • L
Directory Traversal

<19.1.3-r8
  • L
Allocation of Resources Without Limits or Throttling

<19.1.7-r6
  • L
GHSA-35jp-ww65-95wh

<19.1.3-r7
  • L
GHSA-j5f8-grm9-p9fc

<19.1.7-r6
  • L
Information Exposure

<19.1.7-r6
  • L
GHSA-62hf-57xw-28j9

<19.1.7-r6
  • L
GHSA-xhjh-pmcv-23jw

<19.1.7-r6
  • L
Resource Exhaustion

<19.1.7-r6
  • L
GHSA-m7pr-hjqh-92cm

<19.1.7-r6
  • L
Improper Check for Unusual or Exceptional Conditions

<19.1.7-r6
  • L
HTTP Response Splitting

<19.1.7-r6
  • L
GHSA-898c-q2cr-xwhg

<19.1.7-r6
  • L
GHSA-r4q5-vmmm-2653

<19.1.3-r7
  • L
GHSA-3g43-6gmg-66jw

<19.1.7-r6
  • H
Information Exposure

<19.1.7-r6
  • H
Server-Side Request Forgery (SSRF)

<19.1.7-r6
  • H
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.7-r6
  • L
GHSA-w9j2-pvgh-6h63

<19.1.7-r6
  • L
Allocation of Resources Without Limits or Throttling

<19.1.3-r7
  • L
GHSA-6chq-wfr3-2hj9

<19.1.7-r6
  • L
GHSA-445q-vr5w-6q77

<19.1.3-r7
  • C
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.3-r7
  • L
GHSA-5c9x-8gcm-mpgx

<19.1.7-r6
  • H
Uncontrolled Recursion

<19.1.7-r6
  • L
Improper Encoding or Escaping of Output

<19.1.7-r6
  • L
GHSA-43fc-jf86-j433

<19.1.7-r6
  • L
GHSA-p92q-9vqr-4j8v

<19.1.7-r6
  • C
Improperly Controlled Modification of Dynamically-Determined Object Attributes

<19.1.3-r7
  • L
Unintended Proxy or Intermediary ('Confused Deputy')

<19.1.3-r7
  • L
Allocation of Resources Without Limits or Throttling

<19.1.3-r7
  • L
GHSA-fvcv-3m26-pcqx

<19.1.7-r6
  • M
Improper Authentication

<19.1.7-r6
  • M
HTTP Response Splitting

<19.1.7-r6
  • C
Permissive Whitelist

<19.1.7-r6
  • L
GHSA-3w6x-2g7m-8v23

<19.1.3-r7
  • L
CRLF Injection

<19.1.3-r7
  • L
GHSA-vf2m-468p-8v99

<19.1.7-r6
  • L
GHSA-hfxv-24rg-xrqf

<19.1.7-r6
  • L
GHSA-pmwg-cvhr-8vh7

<19.1.7-r6
  • L
GHSA-4hjh-wcwx-xvwj

<19.1.3-r7
  • L
GHSA-pf86-5x62-jrwf

<19.1.7-r6
  • L
GHSA-3p68-rc4w-qgx5

<19.1.7-r6
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.7-r6
  • L
GHSA-xx6v-rp6x-q39c

<19.1.7-r6
  • L
Allocation of Resources Without Limits or Throttling

<19.1.7-r6
  • H
Arbitrary Code Injection

<19.1.7-r6
  • L
Permissive Whitelist

<19.1.7-r6
  • L
GHSA-q8qp-cvcw-x6jj

<19.1.3-r7
  • L
GHSA-777c-7fjr-54vf

<19.1.3-r7
  • C
Unintended Proxy or Intermediary ('Confused Deputy')

<19.1.7-r6
  • L
GHSA-xc2p-8ggw-6cr5

<19.1.3-r6
  • L
CVE-2026-56862

<19.1.3-r6
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<19.1.3-r6
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<19.1.3-r6
  • L
GHSA-25mv-j2qr-v5jq

<19.1.3-r6
  • L
CVE-2026-56859

<19.1.3-r6
  • L
GHSA-28wg-ghj8-5hjv

<19.1.3-r6
  • L
GHSA-2v37-7h3g-55p8

<19.1.3-r6
  • L
GHSA-7qch-w8m5-g3h3

<19.1.3-r6
  • L
CVE-2026-56860

<19.1.3-r6
  • L
GHSA-76p8-fhrm-vpc7

<19.1.3-r6
  • L
CVE-2026-33818

<19.1.3-r6
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.3-r5
  • L
GHSA-737v-mqg7-c878

<19.1.3-r5
  • L
CVE-2026-13311

<19.1.3-r4
  • L
GHSA-395f-4hp3-45gv

<19.1.3-r4
  • L
Uncontrolled Recursion

<19.1.3-r3
  • L
GHSA-25h7-pfq9-p65f

<19.1.3-r3
  • L
XML Injection

<19.1.3-r2
  • L
XML Injection

<19.1.3-r2
  • L
Uncontrolled Recursion

<19.1.3-r2
  • L
GHSA-f6ww-3ggp-fr8h

<19.1.3-r2
  • L
GHSA-wh4c-j3r5-mjhp

<19.1.3-r2
  • L
XML Injection

<19.1.3-r2
  • L
XML Injection

<19.1.3-r2
  • L
GHSA-j759-j44w-7fr8

<19.1.3-r2
  • L
GHSA-x6wf-f3px-wcqx

<19.1.3-r2
  • L
GHSA-2v35-w6hq-6mfw

<19.1.3-r2
  • L
Uncaught Exception

<19.1.2-r8
  • L
GHSA-34x7-hfp2-rc4v

<19.1.2-r8
  • M
Directory Traversal

<19.1.2-r8
  • L
GHSA-9ppj-qmqm-q256

<19.1.2-r8
  • L
Directory Traversal

<19.1.2-r8
  • L
GHSA-8x88-c5mf-7j5w

<19.1.2-r8
  • L
GHSA-r6q2-hw4h-h46w

<19.1.2-r8
  • L
GHSA-vmf3-w455-68vh

<19.1.2-r8
  • L
GHSA-gvwx-54wh-qm9j

<19.1.2-r8
  • L
Incorrect Type Conversion or Cast

<19.1.2-r8
  • L
GHSA-qffp-2rhf-9h96

<19.1.2-r8
  • L
GHSA-w8wr-v893-vjvp

<19.1.2-r8
  • L
GHSA-83g3-92jg-28cx

<19.1.2-r8
  • L
GHSA-8qq5-rm4j-mr97

<19.1.2-r8
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

<19.1.2-r8
  • L
Allocation of Resources Without Limits or Throttling

<19.1.2-r8
  • M
Directory Traversal

<19.1.2-r8
  • L
Interpretation Conflict

<19.1.2-r8
  • M
Directory Traversal

<19.1.2-r8
  • H
Directory Traversal

<19.1.2-r8
  • L
GHSA-23hp-3jrh-7fpw

<19.1.2-r8
  • M
Improper Handling of Unicode Encoding

<19.1.2-r8
  • L
GHSA-xv26-6w52-cph6

<19.1.2-r7
  • L
GHSA-mp7j-qc5w-4988

<19.1.2-r7
  • L
Allocation of Resources Without Limits or Throttling

<19.1.2-r7
  • H
Improper Handling of Length Parameter Inconsistency

<19.1.2-r7
  • L
CVE-2025-12816

<19.1.2-r6
  • L
Improper Verification of Cryptographic Signature

<19.1.2-r6
  • H
Uncontrolled Recursion

<19.1.2-r6
  • L
GHSA-5m6q-g25r-mvwx

<19.1.2-r6
  • L
Improper Input Validation

<19.1.2-r6
  • L
GHSA-65ch-62r8-g69g

<19.1.2-r6
  • M
Integer Overflow or Wraparound

<19.1.2-r6
  • L
GHSA-ppp5-5v6c-4jwp

<19.1.2-r6
  • L
GHSA-2328-f5f3-gj25

<19.1.2-r6
  • C
Improper Certificate Validation

<19.1.2-r6
  • L
GHSA-554w-wpv2-vw27

<19.1.2-r6
  • L
GHSA-q67f-28xg-22rw

<19.1.2-r6
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

<19.1.2-r6
  • L
GHSA-5gfm-wpxj-wjgq

<19.1.2-r6
  • L
GHSA-22p9-wv53-3rq4

<19.1.2-r5
  • H
Inefficient Regular Expression Complexity

<19.1.2-r5
  • L
GHSA-w7jw-789q-3m8p

<19.1.2-r4
  • L
CVE-2026-9277

<19.1.2-r4
  • L
GHSA-w5pp-99ch-qj29

<19.1.2-r3
  • L
GHSA-crhj-59gh-8x96

<19.1.2-r3
  • C
Improper Encoding or Escaping of Output

<19.1.2-r3
  • L
GHSA-xhf5-7wjv-pqxp

<19.1.2-r3
  • L
GHSA-c2c7-rcm5-vvqj

<19.1.2-r3
  • L
Improper Input Validation

<19.1.2-r3
  • L
Inefficient Regular Expression Complexity

<19.1.2-r3
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.1.2-r3
  • L
CVE-2026-47262

<19.1.2-r3
  • L
GHSA-m7cr-m3pv-hgrp

<19.1.2-r3
  • L
GHSA-3v7f-55p6-f55p

<19.1.2-r3
  • L
Directory Traversal

<19.1.2-r3
  • L
GHSA-jpcc-p29g-p8mq

<19.1.2-r3
  • H
Incorrect Behavior Order: Validate Before Canonicalize

<19.1.2-r2
  • L
GHSA-p9ff-h696-f583

<19.1.2-r2
  • L
GHSA-5xrq-8626-4rwp

<19.1.2-r2
  • M
Directory Traversal

<19.1.2-r2
  • L
GHSA-v2wj-q39q-566r

<19.1.2-r2
  • M
Directory Traversal

<19.1.2-r2
  • L
GHSA-4w7w-66w2-5vf9

<19.1.2-r2
  • H
Information Exposure

<19.1.2-r2
  • L
GHSA-pjwm-pj3p-43mv

<19.1.7-r6
  • L
Server-Side Request Forgery (SSRF)

<19.1.7-r6
  • L
GHSA-7rx3-28cr-v5wh

<19.1.1-r6
  • L
Arbitrary Code Injection

<19.1.1-r6
  • L
Arbitrary Code Injection

<19.1.1-r6
  • L
GHSA-xjpj-3mr7-gcpf

<19.1.1-r6
  • L
Improper Check for Unusual or Exceptional Conditions

<19.1.1-r6
  • L
GHSA-xhpv-hc6g-r9c6

<19.1.1-r6
  • L
GHSA-3mfm-83xf-c92r

<19.1.1-r6
  • L
GHSA-442j-39wm-28r2

<19.1.1-r6
  • L
GHSA-2qvq-rjwj-gvw9

<19.1.1-r6
  • L
Arbitrary Code Injection

<19.1.1-r6
  • L
GHSA-9cx6-37pm-9jff

<19.1.1-r6
  • H
Cross-site Scripting (XSS)

<19.1.1-r6
  • L
GHSA-2w6w-674q-4c4q

<19.1.1-r6
  • M
Cross-site Scripting (XSS)

<19.1.1-r6
  • L
CVE-2025-6545

<19.1.1-r5
  • L
CVE-2025-6547

<19.1.1-r5
  • L
GHSA-v62p-rq8g-8h59

<19.1.1-r5
  • L
GHSA-h7cp-r72f-jxh6

<19.1.1-r5
  • L
Symlink Following

<19.1.1-r4
  • L
GHSA-rgh6-rfwx-v388

<19.1.1-r4
  • L
GHSA-84xv-jfrm-h4gm

<19.1.1-r4
  • L
CVE-2026-50195

<19.1.1-r4
  • L
CVE-2025-7783

<19.1.1-r4
  • L
GHSA-33vj-92qq-66hc

<19.1.1-r4
  • L
Improper Input Validation

<19.1.1-r4
  • L
GHSA-cvxm-645q-p574

<19.1.1-r4
  • L
GHSA-fjxv-7rqg-78g4

<19.1.1-r4
  • C
Directory Traversal

<19.1.1-r4
  • L
GHSA-cpq7-6gpm-g9rc

<19.1.1-r3
  • C
CVE-2025-9287

<19.1.1-r3
  • L
GHSA-95m3-7q98-8xr5

<19.1.1-r1
  • C
CVE-2025-9288

<19.1.1-r1