gitlab-runner-helper-fips-19.0

Direct Vulnerabilities

Known vulnerabilities in the gitlab-runner-helper-fips-19.0 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L Improper Validation of Integrity Check Value	*
L Server-Side Request Forgery (SSRF)	*
L Incorrect Authorization	*
L Incorrect Authorization	*
L Incorrect Authorization	*
L Permissive Regular Expression	*
L Information Exposure Through Log Files	*
L Acceptance of Extraneous Untrusted Data With Trusted Data	*
L Incorrect Authorization	*
L Incorrect Authorization	*
L Insufficient Granularity of Access Control	*
L CVE-2026-94447	*
L Incorrect Authorization	*
L CVE-2026-94444	*
L Open Redirect	*
L Incorrect Authorization	*
L Incorrect Authorization	*
L CVE-2026-94440	*
L CVE-2026-94448	*
L CVE-2026-78667	*
L CVE-2026-56857	*
L CVE-2026-78660	*
L CVE-2026-78669	*
L CVE-2026-97032	*
L CVE-2026-56866	*
L CVE-2026-97031	*
L CVE-2026-94439	*
L CVE-2026-78659	*
L CVE-2026-78663	*
L CVE-2026-97030	*
L CVE-2026-56851	<19.0.3-r4
L Incorrect Authorization	*
L Race Condition	*
L Information Exposure	*
L CVE-2026-85706	*
L Improper Handling of Case Sensitivity	*
L Improper Validation of Array Index	*
L CVE-2026-78662	*
L CVE-2026-56855	*
L Resource Exhaustion	*
L Allocation of Resources Without Limits or Throttling	*
L CVE-2026-56854	<19.0.3-r4
L Race Condition	*
L Cross-site Scripting (XSS)	*
L GO-2026-5932	*
M Use of Incorrectly-Resolved Name or Reference	*
H Off-by-one Error	*
L Cross-site Scripting (XSS)	*
L Missing Authorization	*
H Authentication Bypass	*
L GHSA-xmrv-pmrh-hhx2	*
L CVE-2026-56853	<19.0.3-r3
L CVE-2026-33818	<19.0.3-r3
L CVE-2026-56859	<19.0.3-r3
L CVE-2026-56860	<19.0.3-r3
L CVE-2026-56862	<19.0.3-r3
L CVE-2026-56865	<19.0.3-r4
L CVE-2026-56858	<19.0.3-r3
L CVE-2026-56864	<19.0.3-r4
L Link Following	<19.0.3-r2
L Directory Traversal	<19.0.3-r2
L GHSA-259r-337f-4rfw	<19.0.3-r1
L CVE-2026-56852	<19.0.2-r2
L GHSA-hrxh-6v49-42gf	<19.0.2-r2
L CVE-2026-46600	<19.0.2-r2
L Uncontrolled Memory Allocation	<19.0.2-r2
L CVE-2026-39822	<19.0.2-r1
L CVE-2026-42505	<19.0.2-r1
H Symlink Following	*
M Server-Side Request Forgery (SSRF)	<19.0.2-r0
M Improper Neutralization	<19.0.2-r0
L Authorization Bypass Through User-Controlled Key	<19.0.2-r0
L Incorrect Authorization	<19.0.2-r0
L GHSA-pmwq-pjrm-6p5r	<19.0.1-r3
L Directory Traversal	<19.0.1-r3
L Uncontrolled Recursion	<19.0.1-r3
L GHSA-w5pp-99ch-qj29	<19.0.1-r3
L Uncontrolled Search Path Element	*
H Incorrect Behavior Order: Validate Before Canonicalize	<19.0.1-r3
C Improper Encoding or Escaping of Output	<19.0.1-r3
L Uncaught Exception	<19.0.1-r3
L Directory Traversal	<19.0.1-r3
L Deserialization of Untrusted Data	<19.0.1-r1
L Missing Authorization	<19.0.1-r1
L Resource Exhaustion	<19.0.1-r1
L Improper Certificate Validation	<19.0.1-r1
L Out-of-Bounds	<19.0.1-r1
L Improper Restriction of Rendered UI Layers or Frames	<19.0.1-r1
L CVE-2026-42504	<19.0.1-r1
L CVE-2026-27145	<19.0.1-r1
L Missing Authorization	<19.0.1-r1
L Improper Restriction of Rendered UI Layers or Frames	<19.0.1-r1
L CVE-2026-39821	<19.0.1-r1
L Incorrect Type Conversion or Cast	<19.0.1-r1
L Integer Overflow or Wraparound	<19.0.1-r1
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	<19.0.1-r1
L Improper Verification of Cryptographic Signature	<19.0.1-r1
L CVE-2026-46598	<19.0.1-r1
L Cross-site Scripting (XSS)	<19.0.1-r1
L CVE-2026-42507	<19.0.1-r1
L Improper Restriction of Rendered UI Layers or Frames	<19.0.1-r1
L CVE-2026-46595	<19.0.1-r1
L Improper Certificate Validation	<19.0.1-r1
L Improper Certificate Validation	<19.0.1-r1
L CVE-2026-39824	<19.0.1-r1
L Use of Incorrectly-Resolved Name or Reference	<19.0.1-r0
L Allocation of Resources Without Limits or Throttling	<19.0.1-r0
L Incorrect Authorization	<19.0.1-r0

gitlab-runner-helper-fips-19.0

Direct Vulnerabilities

Fix vulnerabilities automatically