FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2025-07-21 20:49:39 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
1daa2814-0a6c-11f0-b4e4-2cf05da270f3Gitlab -- Vulnerabilities

Gitlab reports:

Cross-site Scripting (XSS) through merge-request error messages

Cross-site Scripting (XSS) through improper rendering of certain file types

Admin Privileges Persists After Role is Revoked

External user can access internal projects

Prompt injection in Amazon Q integration may allow unauthorized actions

Uncontrolled Resource Consumption via a maliciously crafted terraform file in merge request

Maintainer can inject shell code in Harbor project name configuration when using helper scripts


Discovery 2025-03-26
Entry 2025-03-26
gitlab-ce
gitlab-ee
>= 17.10.0 lt 17.10.1

>= 17.9.0 lt 17.9.3

>= 12.10.0 lt 17.8.6

CVE-2025-2255
CVE-2025-0811
CVE-2025-2242
CVE-2024-12619
CVE-2024-10307
CVE-2024-9773
https://about.gitlab.com/releases/2025/03/26/patch-release-gitlab-17-10-1-released/