gitlab-runner-oci-entrypoint-18.8

Direct Vulnerabilities

Known vulnerabilities in the gitlab-runner-oci-entrypoint-18.8 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L Acceptance of Extraneous Untrusted Data With Trusted Data	*
L Incorrect Authorization	*
L Incorrect Authorization	*
L Permissive Regular Expression	*
L Incorrect Authorization	*
L Incorrect Authorization	*
L Incorrect Authorization	*
L Open Redirect	*
L Server-Side Request Forgery (SSRF)	*
L Incorrect Authorization	*
L Incorrect Authorization	*
L Information Exposure Through Log Files	*
L Incorrect Authorization	*
L Race Condition	*
L CVE-2026-85706	*
L Allocation of Resources Without Limits or Throttling	*
M Use of Incorrectly-Resolved Name or Reference	*
L Missing Authorization	*
L Cross-site Scripting (XSS)	*
H Cross-site Scripting (XSS)	*
L Incorrect Authorization	*
M Improper Neutralization	*
L Authorization Bypass Through User-Controlled Key	*
L Allocation of Resources Without Limits or Throttling	*
L Authorization Bypass Through User-Controlled Key	*
L Incorrect Authorization	*
L Allocation of Resources Without Limits or Throttling	*
L Use of Incorrectly-Resolved Name or Reference	*
L Missing Authorization	*
L Allocation of Resources Without Limits or Throttling	*
H Improper Handling of Parameters	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	<18.8.0-r6
M Out-of-bounds Write	<18.8.0-r6
M Link Following	<18.8.0-r6
H Allocation of Resources Without Limits or Throttling	<18.8.0-r6
L Improper Encoding or Escaping of Output	<18.8.0-r6
L Cross-site Scripting (XSS)	<18.8.0-r6
L CVE-2026-42499	<18.8.0-r6
L CVE-2026-39825	<18.8.0-r6
L CVE-2026-42501	<18.8.0-r6
H NULL Pointer Dereference	<18.8.0-r6
H Double Free	<18.8.0-r6
C CVE-2026-27143	<18.8.0-r5
H Access of Resource Using Incompatible Type ('Type Confusion')	<18.8.0-r5
H Allocation of Resources Without Limits or Throttling	<18.8.0-r5
M Allocation of Resources Without Limits or Throttling	<18.8.0-r5
M Link Following	<18.8.0-r5
L CVE-2026-32280	<18.8.0-r5
M Cross-site Scripting (XSS)	<18.8.0-r5
H Improper Certificate Validation	<18.8.0-r5
H Incorrect Authorization	<18.8.0-r5
H Improper Certificate Validation	<18.8.0-r5
L Improper Certificate Validation	<18.8.0-r4
L Direct Request ('Forced Browsing')	<18.8.0-r4
L Directory Traversal	<18.8.0-r4
L Improper Certificate Validation	<18.8.0-r4
L Cross-site Scripting (XSS)	<18.8.0-r4
C CVE-2026-1229	<18.8.0-r3
C CVE-2025-68121	<18.8.0-r1
L CVE-2025-61732	<18.8.0-r1
M Improper Validation of Integrity Check Value	<18.8.0-r2

gitlab-runner-oci-entrypoint-18.8

Direct Vulnerabilities

Fix vulnerabilities automatically