gitlab-runner-fips-18.11

Direct Vulnerabilities

Known vulnerabilities in the gitlab-runner-fips-18.11 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Improper Validation of Integrity Check Value	*
L Incorrect Authorization	*
L Incorrect Authorization	*
L Open Redirect	*
L Acceptance of Extraneous Untrusted Data With Trusted Data	*
L Incorrect Authorization	*
L Permissive Regular Expression	*
L Information Exposure Through Log Files	*
L Incorrect Authorization	*
L Incorrect Authorization	*
L Server-Side Request Forgery (SSRF)	*
L CVE-2026-94444	*
L Insufficient Granularity of Access Control	*
L Incorrect Authorization	*
L CVE-2026-94447	*
L Incorrect Authorization	*
L Incorrect Authorization	*
L CVE-2026-78669	*
L CVE-2026-56866	*
L CVE-2026-78663	*
L CVE-2026-94440	*
L CVE-2026-56857	*
L CVE-2026-97031	*
L CVE-2026-78660	*
L CVE-2026-94439	*
L CVE-2026-94448	*
L CVE-2026-97032	*
L CVE-2026-78667	*
L CVE-2026-78659	*
L CVE-2026-97030	*
L CVE-2026-56851	*
L Race Condition	*
L Incorrect Authorization	*
L Information Exposure	*
L CVE-2026-85706	*
L Improper Handling of Case Sensitivity	*
L Improper Validation of Array Index	*
L CVE-2026-78662	*
L CVE-2026-56855	*
L Resource Exhaustion	*
L Allocation of Resources Without Limits or Throttling	*
L CVE-2026-56854	*
L Race Condition	*
L CVE-2026-56864	*
L CVE-2026-56859	*
L CVE-2026-56858	*
L CVE-2026-56865	*
L CVE-2026-33818	*
L CVE-2026-56853	*
L CVE-2026-56862	*
L CVE-2026-56860	*
L Directory Traversal	*
L Link Following	*
L GHSA-259r-337f-4rfw	*
L CVE-2026-56852	*
L GHSA-hrxh-6v49-42gf	*
L CVE-2026-46600	*
M Improper Neutralization	*
L Missing Authorization	*
L Incorrect Authorization	*
L Cross-site Scripting (XSS)	*
L GO-2026-5932	*
L Uncontrolled Memory Allocation	*
L Authorization Bypass Through User-Controlled Key	*
L GO-2025-3408	*
L Cross-site Scripting (XSS)	*
L Uncontrolled Memory Allocation	*
H Off-by-one Error	*
M Server-Side Request Forgery (SSRF)	*
M Use of Incorrectly-Resolved Name or Reference	*
L CVE-2026-39822	<18.11.4-r1
L CVE-2026-42505	<18.11.4-r1
H Symlink Following	*
L Uncontrolled Search Path Element	*
L GHSA-w5pp-99ch-qj29	<18.11.3-r3
L Directory Traversal	<18.11.3-r3
C Improper Encoding or Escaping of Output	<18.11.3-r3
L GHSA-pmwq-pjrm-6p5r	<18.11.3-r3
L Uncontrolled Recursion	<18.11.3-r3
L Directory Traversal	<18.11.3-r3
H Incorrect Behavior Order: Validate Before Canonicalize	<18.11.3-r3
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	<18.11.3-r1
L CVE-2026-39824	<18.11.3-r1
L Integer Overflow or Wraparound	<18.11.3-r1
L Out-of-Bounds	<18.11.3-r1
L Cross-site Scripting (XSS)	<18.11.3-r1
H Integer Overflow or Wraparound	<18.11.3-r3
L CVE-2026-42504	<18.11.3-r1
L CVE-2026-27145	<18.11.3-r1
H Insufficiently Protected Credentials	<18.11.3-r3
L Deserialization of Untrusted Data	<18.11.3-r1
L Uncaught Exception	<18.11.3-r3
L Resource Exhaustion	<18.11.3-r1
L Improper Certificate Validation	<18.11.3-r1
L Improper Validation of Array Index	<18.11.3-r3
L Improper Certificate Validation	<18.11.3-r1
L Improper Validation of Array Index	<18.11.3-r3
L Incorrect Type Conversion or Cast	<18.11.3-r1
L Improper Restriction of Rendered UI Layers or Frames	<18.11.3-r1
L Integer Underflow	<18.11.3-r3
L Improper Verification of Cryptographic Signature	<18.11.3-r1
L Missing Authorization	<18.11.3-r1
L Improper Restriction of Rendered UI Layers or Frames	<18.11.3-r1
L CVE-2026-27141	<18.11.3-r1
L Improper Certificate Validation	<18.11.3-r1
L Allocation of Resources Without Limits or Throttling	<18.11.3-r3
L Improper Restriction of Rendered UI Layers or Frames	<18.11.3-r1
L CVE-2026-46595	<18.11.3-r1
L Missing Authorization	<18.11.3-r1
L CVE-2026-39821	<18.11.3-r1
L GHSA-xmrv-pmrh-hhx2	*
L CVE-2026-42507	<18.11.3-r1
L CVE-2026-46598	<18.11.3-r1
H Authentication Bypass	*
L Improper Authorization	<18.11.3-r3
L Allocation of Resources Without Limits or Throttling	<18.11.3-r0
L Missing Authorization	<18.11.3-r0
L CVE-2026-42499	<18.11.2-r1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<18.11.2-r1
L Cross-site Scripting (XSS)	<18.11.2-r1
L CVE-2026-39825	<18.11.2-r1
L Improper Encoding or Escaping of Output	<18.11.2-r1
M Link Following	<18.11.2-r1
H Allocation of Resources Without Limits or Throttling	<18.11.2-r1
H Double Free	<18.11.2-r1
M Out-of-bounds Write	<18.11.2-r1
L CVE-2026-42501	<18.11.2-r1
H NULL Pointer Dereference	<18.11.2-r1

Vulnerability

Vulnerable Version

Improper Validation of Integrity Check Value