FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-25 11:22:49 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
2823048d-9f8f-11ec-8c9c-001b217b3468	Gitlab -- multiple vulnerabilities Gitlab reports: Runner registration token disclosure through Quick Actions Unprivileged users can add other users to groups through an API endpoint Inaccurate display of Snippet contents can be potentially misleading to users Environment variables can be leaked via the sendmail delivery method Unauthenticated user enumeration on GraphQL API Adding a mirror with SSH credentials can leak password Denial of Service via user comments Discovery 2022-02-25 Entry 2022-03-09 gitlab-ce ge 14.8.0 lt 14.8.2 ge 14.7.0 lt 14.7.4 ge 0 lt 14.6.5 CVE-2022-0735 CVE-2022-0549 CVE-2022-0751 CVE-2022-0741 CVE-2021-4191 CVE-2022-0738 CVE-2022-0489 https://about.gitlab.com/releases/2022/02/25/critical-security-release-gitlab-14-8-2-released/

VuXML ID

Description

2823048d-9f8f-11ec-8c9c-001b217b3468

Gitlab -- multiple vulnerabilities

Gitlab reports:

Runner registration token disclosure through Quick Actions

Unprivileged users can add other users to groups through an API endpoint

Inaccurate display of Snippet contents can be potentially misleading to users

Environment variables can be leaked via the sendmail delivery method

Unauthenticated user enumeration on GraphQL API

Adding a mirror with SSH credentials can leak password

Denial of Service via user comments

Discovery 2022-02-25
Entry 2022-03-09
gitlab-ce

ge 14.8.0 lt 14.8.2

ge 14.7.0 lt 14.7.4

ge 0 lt 14.6.5

CVE-2022-0735
CVE-2022-0549
CVE-2022-0751
CVE-2022-0741
CVE-2021-4191
CVE-2022-0738
CVE-2022-0489
https://about.gitlab.com/releases/2022/02/25/critical-security-release-gitlab-14-8-2-released/