gitlab-rails-ce-fips-18.10

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

GHSA-2qvq-rjwj-gvw9

<18.10.8-r8

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

CVE-2024-4068

<18.10.8-r8

CVE-2025-6547

<18.10.8-r8

Integer Overflow or Wraparound

<18.10.8-r8

GHSA-rgw5-rvv9-x895

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

HTTP Response Splitting

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

GHSA-238p-pmpm-9mq7

<18.10.8-r8

GHSA-qw65-cvwx-89v3

<18.10.8-r8

GHSA-vxr8-fq34-vvx9

<18.10.8-r8

<18.10.8-r8

GHSA-f886-m6hf-6m8v

<18.10.8-r8

GHSA-p92q-9vqr-4j8v

<18.10.8-r8

GHSA-395f-4hp3-45gv

<18.10.8-r8

Improper Input Validation

<18.10.8-r8

Interpretation Conflict

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Improper Handling of Unicode Encoding

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

GHSA-9ppj-qmqm-q256

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Improper Validation of Specified Quantity in Input

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

GHSA-m28w-2pqf-7qgj

<18.10.8-r8

GHSA-q2hr-2g5m-vwhr

<18.10.8-r8

Loop with Unreachable Exit Condition ('Infinite Loop')

<18.10.8-r8

<18.10.8-r8

GHSA-w9m9-85wc-3x92

<18.10.8-r8

<18.10.8-r8

Improper Certificate Validation

<18.10.8-r8

GHSA-8qq5-rm4j-mr97

<18.10.8-r8

<18.10.8-r8

GHSA-968p-4wvh-cqc8

<18.10.8-r8

<18.10.8-r8

Use of Uninitialized Resource

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Allocation of Resources Without Limits or Throttling

<18.10.8-r8

Incorrect Behavior Order: Validate Before Canonicalize

<18.10.8-r8

GHSA-hmw2-7cc7-3qxx

<18.10.8-r8

GHSA-4x5r-pxfx-6jf8

<18.10.8-r8

GHSA-3w6x-2g7m-8v23

<18.10.8-r8

<18.10.8-r8

GHSA-9wx3-p993-35vp

<18.10.8-r8

GHSA-vfj7-8cjw-p6xm

<18.10.8-r8

Improperly Controlled Modification of Dynamically-Determined Object Attributes

<18.10.8-r8

GHSA-vj76-c3g6-qr5v

<18.10.8-r8

GHSA-gvmj-g25r-r7wr

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

Improper Authentication

<18.10.8-r8

Information Exposure

<18.10.8-r8

GHSA-h7mw-gpvr-xq4m

<18.10.8-r8

GHSA-w9j2-pvgh-6h63

<18.10.8-r8

<18.10.8-r8

GHSA-79cf-xcqc-c78w

<18.10.8-r8

Reliance on Untrusted Inputs in a Security Decision

<18.10.8-r8

Exposed Dangerous Method or Function

<18.10.8-r8

<18.10.8-r8

CVE-2026-87776

<18.10.8-r8

GHSA-86w9-cpqp-85rv

<18.10.8-r8

GHSA-h7cp-r72f-jxh6

<18.10.8-r8

Origin Validation Error

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Improper Encoding or Escaping of Output

<18.10.8-r8

GHSA-fxqj-rqcc-2cmp

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

External Control of File Name or Path

<18.10.8-r8

GHSA-5gfm-wpxj-wjgq

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Loop with Unreachable Exit Condition ('Infinite Loop')

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

Improper Verification of Cryptographic Signature

<18.10.8-r8

Allocation of Resources Without Limits or Throttling

<18.10.8-r8

GHSA-p498-v437-472g

<18.10.8-r8

CVE-2026-14257

<18.10.8-r8

Improper Input Validation

<18.10.8-r8

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

CVE-2024-47764

<18.10.8-r8

<18.10.8-r8

Improper Certificate Validation

<18.10.8-r8

<18.10.8-r8

GHSA-hrr3-gc8f-f4qj

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

GHSA-7fh5-64p2-3v2j

<18.10.8-r8

GHSA-2w6w-674q-4c4q

<18.10.8-r8

GHSA-xjh9-v7x6-24jw

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Improper Verification of Cryptographic Signature

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Allocation of Resources Without Limits or Throttling

<18.10.8-r8

Integer Overflow or Wraparound

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

GHSA-w7fw-mjwx-w883

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

<18.10.8-r8

GHSA-4c8g-83qw-93j6

<18.10.8-r8

GHSA-4v9v-hfq4-rm2v

<18.10.8-r8

GHSA-7p8r-x3mc-p8w7

<18.10.8-r8

Incorrect Type Conversion or Cast

<18.10.8-r8

GHSA-6fw5-9hq8-w87g

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

Improper Verification of Cryptographic Signature

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Loop with Unreachable Exit Condition ('Infinite Loop')

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Protection Mechanism Failure

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Loop with Unreachable Exit Condition ('Infinite Loop')

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Unintended Proxy or Intermediary ('Confused Deputy')

<18.10.8-r8

Trust Boundary Violation

<18.10.8-r8

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

Improper Resource Shutdown or Release

<18.10.8-r8

Loop with Unreachable Exit Condition ('Infinite Loop')

<18.10.8-r8

CVE-2026-39821

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

GHSA-v6h2-p8h4-qcjw

<18.10.8-r8

<18.10.8-r8

Allocation of Resources Without Limits or Throttling

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Allocation of Resources Without Limits or Throttling

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

CVE-2026-9277

<18.10.8-r8

Insufficient Comparison

<18.10.8-r8

Uncaught Exception

<18.10.8-r8

GHSA-fq2j-3j99-rx65

<18.10.8-r8

GHSA-vpq2-c234-7xj6

<18.10.8-r8

Allocation of Resources Without Limits or Throttling

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Cross-site Request Forgery (CSRF)

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

GHSA-gxm5-99cw-xjw9

<18.10.8-r8

GHSA-2g4f-4pwh-qvx6

<18.10.8-r8

Loop with Unreachable Exit Condition ('Infinite Loop')

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

Improper Handling of Length Parameter Inconsistency

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

HTTP Response Splitting

<18.10.8-r8

GHSA-898c-q2cr-xwhg

<18.10.8-r8

Allocation of Resources Without Limits or Throttling

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

GHSA-xvcm-6775-5m9r

<18.10.8-r8

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

<18.10.8-r8

GHSA-25h7-pfq9-p65f

<18.10.8-r8

GHSA-3g43-6gmg-66jw

<18.10.8-r8

Improper Validation of Specified Quantity in Input

<18.10.8-r8

CVE-2026-45249

<18.10.8-r8

CVE-2026-4867

<18.10.8-r8

<18.10.8-r8

GHSA-jqcg-44mw-7w3h

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

Improper Check for Unusual or Exceptional Conditions

<18.10.8-r8

GHSA-qhr7-859c-m2p7

<18.10.8-r8

<18.10.8-r8

CVE-2024-6783

<18.10.8-r8

GHSA-95m3-7q98-8xr5

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

<18.10.8-r8

GHSA-87f9-hvmw-gh4p

<18.10.8-r8

Integer Overflow or Wraparound

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

GHSA-fjxv-7rqg-78g4

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

GHSA-5m6q-g25r-mvwx

<18.10.8-r8

CVE-2026-75975

<18.10.8-r8

GHSA-6w3j-5fw6-r9vr

<18.10.8-r8

Unintended Proxy or Intermediary ('Confused Deputy')

<18.10.8-r8

GHSA-vcc3-ghjq-m6fr

<18.10.8-r8

CVE-2026-8723

<18.10.8-r8

<18.10.8-r8

Improper Encoding or Escaping of Output

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

GHSA-477h-4r7f-fvrx

<18.10.8-r8

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r8

<18.10.8-r7

<18.10.8-r7

<18.10.8-r7

<18.10.8-r7

GHSA-rh9x-7xjc-vwx2

<18.10.8-r0

Memory Leak

<18.10.8-r0

GHSA-5jhf-fpp7-v2pv

<18.10.8-r0

Allocation of Resources Without Limits or Throttling

<18.10.8-r0

<18.10.8-r7

GHSA-6mxv-c89j-2494

<18.10.8-r7

GHSA-8jc8-cvqj-p926

<18.10.8-r7

Exposure of Sensitive Information Through Metadata

<18.10.8-r7

<18.10.8-r7

<18.10.8-r7

<18.10.8-r7

<18.10.8-r7

<18.10.8-r7

<18.10.8-r7

Improperly Controlled Modification of Dynamically-Determined Object Attributes

<18.10.8-r7

<18.10.8-r7

Missing Authorization

<18.10.8-r7

<18.10.8-r7

Missing Authorization

<18.10.8-r7

GHSA-86r3-q889-hvg2

<18.10.8-r7

GHSA-g9g2-qc64-jgcj

<18.10.8-r7

Insecure Default Initialization of Resource

<18.10.8-r7

GHSA-xr9x-r78c-5hrm

<18.10.8-r7

<18.10.8-r7

<18.10.8-r4

<18.10.8-r4

<18.10.8-r4

<18.10.8-r4

Improper Input Validation

<18.10.8-r8

GHSA-pjwm-pj3p-43mv

<18.10.8-r8

<18.10.8-r3

<18.10.8-r3

<18.10.8-r3

<18.10.8-r3

<18.10.8-r3

<18.10.8-r3

<18.10.8-r3

<18.10.8-r3

<18.10.8-r2

<18.10.8-r2

GHSA-c4fp-cxrr-mj66

<18.10.8-r2

GHSA-8p34-64r3-mwg8

<18.10.8-r2

GHSA-46q3-7gv7-qmgg

<18.10.8-r2

Improper Neutralization

<18.10.8-r2

Authentication Bypass

<18.10.8-r1

GHSA-2vqw-3mp8-cgmx

<18.10.8-r1

Improper Privilege Management

<18.10.8-r1

GHSA-qpgp-93vx-g8v8

<18.10.8-r1

Improper Authentication

<18.10.8-r0

<18.10.8-r0

<18.10.8-r0

<18.10.8-r0

<18.10.7-r1

<18.10.7-r1

<18.10.7-r1

<18.10.7-r1

<18.10.6-r3

<18.10.6-r3

GHSA-crhj-59gh-8x96

<18.10.6-r2

Improper Encoding or Escaping of Output

<18.10.6-r2

<18.10.6-r2

GHSA-m7cr-m3pv-hgrp

<18.10.6-r2

GHSA-389r-gv7p-r3rp

<18.10.6-r1

<18.10.6-r1

Incorrect Behavior Order: Validate Before Canonicalize

<18.10.6-r1

GHSA-m3xc-h892-ggx6

<18.10.6-r1

<18.10.6-r1

<18.10.6-r1

<18.10.6-r0

<18.10.6-r0

<18.10.6-r0

<18.10.6-r0

<18.10.6-r0

<18.10.6-r0

Allocation of Resources Without Limits or Throttling

<18.10.6-r0

NULL Pointer Dereference

<18.10.6-r0

<18.10.6-r0

<18.10.6-r0

<18.10.6-r0

<18.10.6-r0

Allocation of Resources Without Limits or Throttling

<18.10.4-r2

Insufficiently Protected Credentials

<18.10.4-r2

<18.10.4-r2

<18.10.4-r2

<18.10.4-r1

<18.10.4-r1

<18.10.4-r1

<18.10.4-r1

GHSA-75xq-5h9v-w6px

<18.10.4-r1

GHSA-vcgp-9326-pqcp

<18.10.4-r1

GHSA-6pjf-3r9x-m592

<18.10.4-r1

Allocation of Resources Without Limits or Throttling

<18.10.4-r1

<18.10.4-r1

Missing Report of Error Condition

<18.10.4-r1

<18.10.4-r1

Permissive Regular Expression

<18.10.4-r1

<18.10.4-r0

<18.10.4-r0

<18.10.4-r0

<18.10.4-r0

<18.10.4-r0

<18.10.4-r0

GHSA-q4qf-9j86-f5mh

<18.10.4-r0

Incorrect Behavior Order: Validate Before Canonicalize

<18.10.4-r0

<18.10.4-r0

GHSA-qv7j-4883-hwh7

<18.10.4-r0

GHSA-v569-hp3g-36wr

<18.10.4-r0

Permissive Regular Expression

<18.10.4-r0

Improper Handling of Length Parameter Inconsistency

<18.10.4-r0

GHSA-q2ww-5357-x388

<18.10.4-r0

Interpretation Conflict

<18.10.4-r0

GHSA-h2jq-g4cq-5ppq

<18.10.4-r0

GHSA-8vqr-qjwx-82mw

<18.10.4-r0

Allocation of Resources Without Limits or Throttling

<18.10.4-r0

<18.10.3-r0

Improper Certificate Validation

<18.10.3-r0

<18.10.3-r0

<18.10.3-r0

<18.10.3-r0

<18.10.3-r0

<18.10.3-r0

<18.10.3-r0

Allocation of Resources Without Limits or Throttling

<18.10.3-r0

<18.10.3-r0

<18.10.3-r0

<18.10.3-r0

<18.10.3-r0

<18.10.3-r0

Uncontrolled Memory Allocation

<18.10.3-r0

GHSA-gm2x-2g9h-ccm8

<18.10.3-r0

GHSA-m4pr-4j3g-9v7v

<18.10.3-r0

GHSA-qcfx-2mfw-w4cg

<18.10.3-r0

Improper Verification of Intent by Broadcast Receiver

<18.10.3-r0

Integer Underflow

<18.10.3-r0

<18.10.3-r0

Improper Validation of Array Index

<18.10.3-r0

<18.10.3-r0

<18.10.3-r0

<18.10.3-r0

<18.10.3-r0

<18.10.3-r0

<18.10.3-r0

<18.10.3-r0

Allocation of Resources Without Limits or Throttling

<18.10.3-r0