gitlab-runner-helper-oci-entrypoint-18.9

Direct Vulnerabilities

Known vulnerabilities in the gitlab-runner-helper-oci-entrypoint-18.9 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L Incorrect Authorization	*
L Incorrect Authorization	*
L Incorrect Authorization	*
L Incorrect Authorization	*
L Incorrect Authorization	*
L Open Redirect	*
L Incorrect Authorization	*
L Information Exposure Through Log Files	*
L Incorrect Authorization	*
L Server-Side Request Forgery (SSRF)	*
L Acceptance of Extraneous Untrusted Data With Trusted Data	*
L Incorrect Authorization	*
L Permissive Regular Expression	*
L Race Condition	*
L Incorrect Authorization	*
L CVE-2026-85706	*
L Allocation of Resources Without Limits or Throttling	*
L Cross-site Scripting (XSS)	*
M Use of Incorrectly-Resolved Name or Reference	*
L Missing Authorization	*
H Cross-site Scripting (XSS)	*
M Improper Neutralization	*
L Allocation of Resources Without Limits or Throttling	*
L Authorization Bypass Through User-Controlled Key	*
L Incorrect Authorization	*
L Authorization Bypass Through User-Controlled Key	*
L Allocation of Resources Without Limits or Throttling	*
L Incorrect Authorization	*
L Use of Incorrectly-Resolved Name or Reference	*
L CVE-2026-39825	<18.9.0-r6
L Cross-site Scripting (XSS)	<18.9.0-r6
L Improper Encoding or Escaping of Output	<18.9.0-r6
H Double Free	<18.9.0-r6
M Out-of-bounds Write	<18.9.0-r6
L CVE-2026-42501	<18.9.0-r6
M Link Following	<18.9.0-r6
H NULL Pointer Dereference	<18.9.0-r6
H Loop with Unreachable Exit Condition ('Infinite Loop')	<18.9.0-r6
L CVE-2026-42499	<18.9.0-r6
H Allocation of Resources Without Limits or Throttling	<18.9.0-r6
H Access of Resource Using Incompatible Type ('Type Confusion')	<18.9.0-r5
C CVE-2026-27143	<18.9.0-r5
M Allocation of Resources Without Limits or Throttling	<18.9.0-r5
H Allocation of Resources Without Limits or Throttling	<18.9.0-r5
H Improper Certificate Validation	<18.9.0-r5
M Link Following	<18.9.0-r5
H Incorrect Authorization	<18.9.0-r5
H Improper Certificate Validation	<18.9.0-r5
M Cross-site Scripting (XSS)	<18.9.0-r5
L CVE-2026-32280	<18.9.0-r5
L GHSA-6g7g-w4f8-9c9x	<18.9.0-r4
L Direct Request ('Forced Browsing')	<18.9.0-r3
L Improper Certificate Validation	<18.9.0-r3
L Improper Certificate Validation	<18.9.0-r3
L Directory Traversal	<18.9.0-r3
L Cross-site Scripting (XSS)	<18.9.0-r3
L Untrusted Search Path	<18.9.0-r2
C CVE-2026-1229	<18.9.0-r1

gitlab-runner-helper-oci-entrypoint-18.9

Direct Vulnerabilities

Fix vulnerabilities automatically