Nixpkgs security tracker

Try the new UI
Login with GitHub

Suggestions search

All statuses
Filter by:
With package: gitlab-ci-validate

Found 78 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2026-4524
6.5 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): High (H)
  • Integrity (I): None (N)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): None (N)
created 4 months, 1 week ago Activity log
  • Created suggestion 4 months, 1 week ago
Authentication Bypass Using an Alternate Path or Channel in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to access confidential issue content in public projects without proper authorization due to improper authorization checks.

Affected products

GitLab
  • <18.10.6
  • <18.11.3
  • <18.9.7

Matching in nixpkgs

pkgs.gitlab

GitLab Community Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ee

GitLab Enterprise Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-art

Pull cross-project Gitlab artifact dependencies

  • nixos-unstable -
    • nixos-unstable-small 0.5.0
  • nixos-26.05 -
    • nixos-26.05-small 0.5.0

pkgs.gitlab-duo

CLI for GitLab AI assistant

  • nixos-unstable -
    • nixos-unstable-small 9.6.0
  • nixos-26.05 -

pkgs.gitlab-kas

Kubernetes Agent (Gitlab side)

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-ls

GitLab CI Language Server (gitlab-ci-ls)

  • nixos-unstable -
    • nixos-unstable-small 1.4.0
  • nixos-26.05 -
    • nixos-26.05-small 1.3.2

pkgs.gitlab-pages

Daemon used to serve static websites for GitLab users

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-shell

SSH access and repository management app for GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.danger-gitlab

Gem that exists to ensure all dependencies are set up for Danger with GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-clippy

Convert clippy warnings into GitLab Code Quality report

  • nixos-unstable -
    • nixos-unstable-small 1.0.3
  • nixos-26.05 -
    • nixos-26.05-small 1.0.3

pkgs.gitlab-runner

GitLab Runner the continuous integration executor of GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-triage

GitLab's issues and merge requests triage, automated

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-local

Run gitlab pipelines locally as shell executor or docker executor

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-timelogs

CLI utility to support you with your time logs in GitLab

  • nixos-unstable -
    • nixos-unstable-small 0.7.1
  • nixos-26.05 -
    • nixos-26.05-small 0.7.1

pkgs.gitlab-ci-linter

.gitlab-ci.yml lint helper tool

  • nixos-unstable -
    • nixos-unstable-small 2.4.0
  • nixos-26.05 -
    • nixos-26.05-small 2.4.0

pkgs.gitlab-ci-validate

Command line tool to validate .gitlab-ci.yml files

  • nixos-unstable -
    • nixos-unstable-small 0.6.0

pkgs.gitlab-release-cli

Toolset to create, retrieve and update releases on GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.ocamlPackages.gitlab

Native OCaml bindings to Gitlab REST API v4

  • nixos-unstable -
    • nixos-unstable-small 0.1.8
  • nixos-26.05 -
    • nixos-26.05-small 0.1.8

Package maintainers

Untriaged
Permalink CVE-2026-6073
8.7 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): Required (R)
  • Scope (S): Changed (C)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): Required (R)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Changed (C)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): None (N)
created 4 months, 1 week ago Activity log
  • Created suggestion 4 months, 1 week ago
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to execute arbitrary JavaScript in other users' browsers due to improper input sanitization.

Affected products

GitLab
  • <18.11.3
  • <18.10.6
  • <18.9.7

Matching in nixpkgs

pkgs.gitlab

GitLab Community Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ee

GitLab Enterprise Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-art

Pull cross-project Gitlab artifact dependencies

  • nixos-unstable -
    • nixos-unstable-small 0.5.0
  • nixos-26.05 -
    • nixos-26.05-small 0.5.0

pkgs.gitlab-duo

CLI for GitLab AI assistant

  • nixos-unstable -
    • nixos-unstable-small 9.6.0
  • nixos-26.05 -

pkgs.gitlab-kas

Kubernetes Agent (Gitlab side)

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-ls

GitLab CI Language Server (gitlab-ci-ls)

  • nixos-unstable -
    • nixos-unstable-small 1.4.0
  • nixos-26.05 -
    • nixos-26.05-small 1.3.2

pkgs.gitlab-pages

Daemon used to serve static websites for GitLab users

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-shell

SSH access and repository management app for GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.danger-gitlab

Gem that exists to ensure all dependencies are set up for Danger with GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-clippy

Convert clippy warnings into GitLab Code Quality report

  • nixos-unstable -
    • nixos-unstable-small 1.0.3
  • nixos-26.05 -
    • nixos-26.05-small 1.0.3

pkgs.gitlab-runner

GitLab Runner the continuous integration executor of GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-triage

GitLab's issues and merge requests triage, automated

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-local

Run gitlab pipelines locally as shell executor or docker executor

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-timelogs

CLI utility to support you with your time logs in GitLab

  • nixos-unstable -
    • nixos-unstable-small 0.7.1
  • nixos-26.05 -
    • nixos-26.05-small 0.7.1

pkgs.gitlab-ci-linter

.gitlab-ci.yml lint helper tool

  • nixos-unstable -
    • nixos-unstable-small 2.4.0
  • nixos-26.05 -
    • nixos-26.05-small 2.4.0

pkgs.gitlab-ci-validate

Command line tool to validate .gitlab-ci.yml files

  • nixos-unstable -
    • nixos-unstable-small 0.6.0

pkgs.gitlab-release-cli

Toolset to create, retrieve and update releases on GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.ocamlPackages.gitlab

Native OCaml bindings to Gitlab REST API v4

  • nixos-unstable -
    • nixos-unstable-small 0.1.8
  • nixos-26.05 -
    • nixos-26.05-small 0.1.8

Package maintainers

Untriaged
Permalink CVE-2026-1184
6.5 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): None (N)
  • Integrity (I): None (N)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): None (N)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): High (H)
created 4 months, 1 week ago Activity log
  • Created suggestion 4 months, 1 week ago
Deserialization of Untrusted Data in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 11.9 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by uploading a specially crafted file due to improper validation.

Affected products

GitLab
  • <18.11.3
  • <18.10.6
  • <18.9.7

Matching in nixpkgs

pkgs.gitlab

GitLab Community Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ee

GitLab Enterprise Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-art

Pull cross-project Gitlab artifact dependencies

  • nixos-unstable -
    • nixos-unstable-small 0.5.0
  • nixos-26.05 -
    • nixos-26.05-small 0.5.0

pkgs.gitlab-duo

CLI for GitLab AI assistant

  • nixos-unstable -
    • nixos-unstable-small 9.6.0
  • nixos-26.05 -

pkgs.gitlab-kas

Kubernetes Agent (Gitlab side)

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-ls

GitLab CI Language Server (gitlab-ci-ls)

  • nixos-unstable -
    • nixos-unstable-small 1.4.0
  • nixos-26.05 -
    • nixos-26.05-small 1.3.2

pkgs.gitlab-pages

Daemon used to serve static websites for GitLab users

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-shell

SSH access and repository management app for GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.danger-gitlab

Gem that exists to ensure all dependencies are set up for Danger with GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-clippy

Convert clippy warnings into GitLab Code Quality report

  • nixos-unstable -
    • nixos-unstable-small 1.0.3
  • nixos-26.05 -
    • nixos-26.05-small 1.0.3

pkgs.gitlab-runner

GitLab Runner the continuous integration executor of GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-triage

GitLab's issues and merge requests triage, automated

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-local

Run gitlab pipelines locally as shell executor or docker executor

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-timelogs

CLI utility to support you with your time logs in GitLab

  • nixos-unstable -
    • nixos-unstable-small 0.7.1
  • nixos-26.05 -
    • nixos-26.05-small 0.7.1

pkgs.gitlab-ci-linter

.gitlab-ci.yml lint helper tool

  • nixos-unstable -
    • nixos-unstable-small 2.4.0
  • nixos-26.05 -
    • nixos-26.05-small 2.4.0

pkgs.gitlab-ci-validate

Command line tool to validate .gitlab-ci.yml files

  • nixos-unstable -
    • nixos-unstable-small 0.6.0

pkgs.gitlab-release-cli

Toolset to create, retrieve and update releases on GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.ocamlPackages.gitlab

Native OCaml bindings to Gitlab REST API v4

  • nixos-unstable -
    • nixos-unstable-small 0.1.8
  • nixos-26.05 -
    • nixos-26.05-small 0.1.8

Package maintainers

Untriaged
Permalink CVE-2026-8144
4.3 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): Low (L)
  • Integrity (I): None (N)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): None (N)
created 4 months, 1 week ago Activity log
  • Created suggestion 4 months, 1 week ago
Missing Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with project membership to enumerate private group members due to missing authorization checks.

Affected products

GitLab
  • <18.11.3
  • <18.10.6
  • <18.9.7

Matching in nixpkgs

pkgs.gitlab

GitLab Community Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ee

GitLab Enterprise Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-art

Pull cross-project Gitlab artifact dependencies

  • nixos-unstable -
    • nixos-unstable-small 0.5.0
  • nixos-26.05 -
    • nixos-26.05-small 0.5.0

pkgs.gitlab-duo

CLI for GitLab AI assistant

  • nixos-unstable -
    • nixos-unstable-small 9.6.0
  • nixos-26.05 -

pkgs.gitlab-kas

Kubernetes Agent (Gitlab side)

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-ls

GitLab CI Language Server (gitlab-ci-ls)

  • nixos-unstable -
    • nixos-unstable-small 1.4.0
  • nixos-26.05 -
    • nixos-26.05-small 1.3.2

pkgs.gitlab-pages

Daemon used to serve static websites for GitLab users

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-shell

SSH access and repository management app for GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.danger-gitlab

Gem that exists to ensure all dependencies are set up for Danger with GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-clippy

Convert clippy warnings into GitLab Code Quality report

  • nixos-unstable -
    • nixos-unstable-small 1.0.3
  • nixos-26.05 -
    • nixos-26.05-small 1.0.3

pkgs.gitlab-runner

GitLab Runner the continuous integration executor of GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-triage

GitLab's issues and merge requests triage, automated

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-local

Run gitlab pipelines locally as shell executor or docker executor

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-timelogs

CLI utility to support you with your time logs in GitLab

  • nixos-unstable -
    • nixos-unstable-small 0.7.1
  • nixos-26.05 -
    • nixos-26.05-small 0.7.1

pkgs.gitlab-ci-linter

.gitlab-ci.yml lint helper tool

  • nixos-unstable -
    • nixos-unstable-small 2.4.0
  • nixos-26.05 -
    • nixos-26.05-small 2.4.0

pkgs.gitlab-ci-validate

Command line tool to validate .gitlab-ci.yml files

  • nixos-unstable -
    • nixos-unstable-small 0.6.0

pkgs.gitlab-release-cli

Toolset to create, retrieve and update releases on GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.ocamlPackages.gitlab

Native OCaml bindings to Gitlab REST API v4

  • nixos-unstable -
    • nixos-unstable-small 0.1.8
  • nixos-26.05 -
    • nixos-26.05-small 0.1.8

Package maintainers

Untriaged
Permalink CVE-2025-14869
7.5 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): None (N)
  • Integrity (I): None (N)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): None (N)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): High (H)
created 4 months, 1 week ago Activity log
  • Created suggestion 4 months, 1 week ago
Improper Validation of Specified Quantity in Input in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted payloads on certain API endpoints.

Affected products

GitLab
  • <18.10.6
  • <18.11.3
  • <18.9.7

Matching in nixpkgs

pkgs.gitlab

GitLab Community Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ee

GitLab Enterprise Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-art

Pull cross-project Gitlab artifact dependencies

  • nixos-unstable -
    • nixos-unstable-small 0.5.0
  • nixos-26.05 -
    • nixos-26.05-small 0.5.0

pkgs.gitlab-duo

CLI for GitLab AI assistant

  • nixos-unstable -
    • nixos-unstable-small 9.6.0
  • nixos-26.05 -

pkgs.gitlab-kas

Kubernetes Agent (Gitlab side)

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-ls

GitLab CI Language Server (gitlab-ci-ls)

  • nixos-unstable -
    • nixos-unstable-small 1.4.0
  • nixos-26.05 -
    • nixos-26.05-small 1.3.2

pkgs.gitlab-pages

Daemon used to serve static websites for GitLab users

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-shell

SSH access and repository management app for GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.danger-gitlab

Gem that exists to ensure all dependencies are set up for Danger with GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-clippy

Convert clippy warnings into GitLab Code Quality report

  • nixos-unstable -
    • nixos-unstable-small 1.0.3
  • nixos-26.05 -
    • nixos-26.05-small 1.0.3

pkgs.gitlab-runner

GitLab Runner the continuous integration executor of GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-triage

GitLab's issues and merge requests triage, automated

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-local

Run gitlab pipelines locally as shell executor or docker executor

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-timelogs

CLI utility to support you with your time logs in GitLab

  • nixos-unstable -
    • nixos-unstable-small 0.7.1
  • nixos-26.05 -
    • nixos-26.05-small 0.7.1

pkgs.gitlab-ci-linter

.gitlab-ci.yml lint helper tool

  • nixos-unstable -
    • nixos-unstable-small 2.4.0
  • nixos-26.05 -
    • nixos-26.05-small 2.4.0

pkgs.gitlab-ci-validate

Command line tool to validate .gitlab-ci.yml files

  • nixos-unstable -
    • nixos-unstable-small 0.6.0

pkgs.gitlab-release-cli

Toolset to create, retrieve and update releases on GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.ocamlPackages.gitlab

Native OCaml bindings to Gitlab REST API v4

  • nixos-unstable -
    • nixos-unstable-small 0.1.8
  • nixos-26.05 -
    • nixos-26.05-small 0.1.8

Package maintainers

Untriaged
Permalink CVE-2026-8280
6.5 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): None (N)
  • Integrity (I): None (N)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): None (N)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): High (H)
created 4 months, 1 week ago Activity log
  • Created suggestion 4 months, 1 week ago
Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to cause denial of service through excessive memory consumption due to improper input validation.

Affected products

GitLab
  • <18.10.6
  • <18.11.3
  • <18.9.7

Matching in nixpkgs

pkgs.gitlab

GitLab Community Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ee

GitLab Enterprise Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-art

Pull cross-project Gitlab artifact dependencies

  • nixos-unstable -
    • nixos-unstable-small 0.5.0
  • nixos-26.05 -
    • nixos-26.05-small 0.5.0

pkgs.gitlab-duo

CLI for GitLab AI assistant

  • nixos-unstable -
    • nixos-unstable-small 9.6.0
  • nixos-26.05 -

pkgs.gitlab-kas

Kubernetes Agent (Gitlab side)

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-ls

GitLab CI Language Server (gitlab-ci-ls)

  • nixos-unstable -
    • nixos-unstable-small 1.4.0
  • nixos-26.05 -
    • nixos-26.05-small 1.3.2

pkgs.gitlab-pages

Daemon used to serve static websites for GitLab users

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-shell

SSH access and repository management app for GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.danger-gitlab

Gem that exists to ensure all dependencies are set up for Danger with GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-clippy

Convert clippy warnings into GitLab Code Quality report

  • nixos-unstable -
    • nixos-unstable-small 1.0.3
  • nixos-26.05 -
    • nixos-26.05-small 1.0.3

pkgs.gitlab-runner

GitLab Runner the continuous integration executor of GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-triage

GitLab's issues and merge requests triage, automated

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-local

Run gitlab pipelines locally as shell executor or docker executor

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-timelogs

CLI utility to support you with your time logs in GitLab

  • nixos-unstable -
    • nixos-unstable-small 0.7.1
  • nixos-26.05 -
    • nixos-26.05-small 0.7.1

pkgs.gitlab-ci-linter

.gitlab-ci.yml lint helper tool

  • nixos-unstable -
    • nixos-unstable-small 2.4.0
  • nixos-26.05 -
    • nixos-26.05-small 2.4.0

pkgs.gitlab-ci-validate

Command line tool to validate .gitlab-ci.yml files

  • nixos-unstable -
    • nixos-unstable-small 0.6.0

pkgs.gitlab-release-cli

Toolset to create, retrieve and update releases on GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.ocamlPackages.gitlab

Native OCaml bindings to Gitlab REST API v4

  • nixos-unstable -
    • nixos-unstable-small 0.1.8
  • nixos-26.05 -
    • nixos-26.05-small 0.1.8

Package maintainers

Untriaged
Permalink CVE-2026-3160
5.8 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Changed (C)
  • Confidentiality (C): Low (L)
  • Integrity (I): None (N)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Changed (C)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): None (N)
created 4 months, 1 week ago Activity log
  • Created suggestion 4 months, 1 week ago
Unintended Proxy or Intermediary ('Confused Deputy') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to view Jira issues outside the configured project scope due to an integration filter functioning only as a display control rather than enforcing access boundaries as specified.

Affected products

GitLab
  • <18.11.3
  • <18.10.6
  • <18.9.7

Matching in nixpkgs

pkgs.gitlab

GitLab Community Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ee

GitLab Enterprise Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-art

Pull cross-project Gitlab artifact dependencies

  • nixos-unstable -
    • nixos-unstable-small 0.5.0
  • nixos-26.05 -
    • nixos-26.05-small 0.5.0

pkgs.gitlab-duo

CLI for GitLab AI assistant

  • nixos-unstable -
    • nixos-unstable-small 9.6.0
  • nixos-26.05 -

pkgs.gitlab-kas

Kubernetes Agent (Gitlab side)

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-ls

GitLab CI Language Server (gitlab-ci-ls)

  • nixos-unstable -
    • nixos-unstable-small 1.4.0
  • nixos-26.05 -
    • nixos-26.05-small 1.3.2

pkgs.gitlab-pages

Daemon used to serve static websites for GitLab users

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-shell

SSH access and repository management app for GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.danger-gitlab

Gem that exists to ensure all dependencies are set up for Danger with GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-clippy

Convert clippy warnings into GitLab Code Quality report

  • nixos-unstable -
    • nixos-unstable-small 1.0.3
  • nixos-26.05 -
    • nixos-26.05-small 1.0.3

pkgs.gitlab-runner

GitLab Runner the continuous integration executor of GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-triage

GitLab's issues and merge requests triage, automated

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-local

Run gitlab pipelines locally as shell executor or docker executor

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-timelogs

CLI utility to support you with your time logs in GitLab

  • nixos-unstable -
    • nixos-unstable-small 0.7.1
  • nixos-26.05 -
    • nixos-26.05-small 0.7.1

pkgs.gitlab-ci-linter

.gitlab-ci.yml lint helper tool

  • nixos-unstable -
    • nixos-unstable-small 2.4.0
  • nixos-26.05 -
    • nixos-26.05-small 2.4.0

pkgs.gitlab-ci-validate

Command line tool to validate .gitlab-ci.yml files

  • nixos-unstable -
    • nixos-unstable-small 0.6.0

pkgs.gitlab-release-cli

Toolset to create, retrieve and update releases on GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.ocamlPackages.gitlab

Native OCaml bindings to Gitlab REST API v4

  • nixos-unstable -
    • nixos-unstable-small 0.1.8
  • nixos-26.05 -
    • nixos-26.05-small 0.1.8

Package maintainers

Untriaged
Permalink CVE-2026-5262
8.0 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): High (H)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): Required (R)
  • Scope (S): Changed (C)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): High (H)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): Required (R)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Changed (C)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): None (N)
created 5 months ago Activity log
  • Created suggestion 5 months ago
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.1.0 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain conditions could have allowed an unauthenticated user to access tokens in the Storybook development environment due to improper input validation.

Affected products

GitLab
  • <18.11.1
  • <18.10.4
  • <18.9.6

Matching in nixpkgs

pkgs.gitlab

GitLab Community Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ee

GitLab Enterprise Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-art

Pull cross-project Gitlab artifact dependencies

  • nixos-unstable -
    • nixos-unstable-small 0.5.0
  • nixos-26.05 -
    • nixos-26.05-small 0.5.0

pkgs.gitlab-duo

CLI for GitLab AI assistant

  • nixos-unstable -
    • nixos-unstable-small 9.6.0
  • nixos-26.05 -

pkgs.gitlab-kas

Kubernetes Agent (Gitlab side)

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-ls

GitLab CI Language Server (gitlab-ci-ls)

  • nixos-unstable -
    • nixos-unstable-small 1.4.0
  • nixos-26.05 -
    • nixos-26.05-small 1.3.2

pkgs.gitlab-pages

Daemon used to serve static websites for GitLab users

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-shell

SSH access and repository management app for GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.danger-gitlab

Gem that exists to ensure all dependencies are set up for Danger with GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-clippy

Convert clippy warnings into GitLab Code Quality report

  • nixos-unstable -
    • nixos-unstable-small 1.0.3
  • nixos-26.05 -
    • nixos-26.05-small 1.0.3

pkgs.gitlab-runner

GitLab Runner the continuous integration executor of GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-triage

GitLab's issues and merge requests triage, automated

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-local

Run gitlab pipelines locally as shell executor or docker executor

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-timelogs

CLI utility to support you with your time logs in GitLab

  • nixos-unstable -
    • nixos-unstable-small 0.7.1
  • nixos-26.05 -
    • nixos-26.05-small 0.7.1

pkgs.gitlab-ci-linter

.gitlab-ci.yml lint helper tool

  • nixos-unstable -
    • nixos-unstable-small 2.4.0
  • nixos-26.05 -
    • nixos-26.05-small 2.4.0

pkgs.gitlab-ci-validate

Command line tool to validate .gitlab-ci.yml files

  • nixos-unstable -
    • nixos-unstable-small 0.6.0

pkgs.gitlab-release-cli

Toolset to create, retrieve and update releases on GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.ocamlPackages.gitlab

Native OCaml bindings to Gitlab REST API v4

  • nixos-unstable -
    • nixos-unstable-small 0.1.8
  • nixos-26.05 -
    • nixos-26.05-small 0.1.8

Package maintainers

Untriaged
Permalink CVE-2026-6515
5.4 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): Low (L)
  • Integrity (I): Low (L)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): Low (L)
  • Modified Availability (MA): None (N)
created 5 months ago Activity log
  • Created suggestion 5 months ago
Insufficient Session Expiration in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed a user to use invalidated or incorrectly scoped credentials to access Virtual Registries under certain conditions.

Affected products

GitLab
  • <18.10.4
  • <18.9.6
  • <18.11.1

Matching in nixpkgs

pkgs.gitlab

GitLab Community Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ee

GitLab Enterprise Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-art

Pull cross-project Gitlab artifact dependencies

  • nixos-unstable -
    • nixos-unstable-small 0.5.0
  • nixos-26.05 -
    • nixos-26.05-small 0.5.0

pkgs.gitlab-duo

CLI for GitLab AI assistant

  • nixos-unstable -
    • nixos-unstable-small 9.6.0
  • nixos-26.05 -

pkgs.gitlab-kas

Kubernetes Agent (Gitlab side)

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-ls

GitLab CI Language Server (gitlab-ci-ls)

  • nixos-unstable -
    • nixos-unstable-small 1.4.0
  • nixos-26.05 -
    • nixos-26.05-small 1.3.2

pkgs.gitlab-pages

Daemon used to serve static websites for GitLab users

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-shell

SSH access and repository management app for GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.danger-gitlab

Gem that exists to ensure all dependencies are set up for Danger with GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-clippy

Convert clippy warnings into GitLab Code Quality report

  • nixos-unstable -
    • nixos-unstable-small 1.0.3
  • nixos-26.05 -
    • nixos-26.05-small 1.0.3

pkgs.gitlab-runner

GitLab Runner the continuous integration executor of GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-triage

GitLab's issues and merge requests triage, automated

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-local

Run gitlab pipelines locally as shell executor or docker executor

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-timelogs

CLI utility to support you with your time logs in GitLab

  • nixos-unstable -
    • nixos-unstable-small 0.7.1
  • nixos-26.05 -
    • nixos-26.05-small 0.7.1

pkgs.gitlab-ci-linter

.gitlab-ci.yml lint helper tool

  • nixos-unstable -
    • nixos-unstable-small 2.4.0
  • nixos-26.05 -
    • nixos-26.05-small 2.4.0

pkgs.gitlab-ci-validate

Command line tool to validate .gitlab-ci.yml files

  • nixos-unstable -
    • nixos-unstable-small 0.6.0

pkgs.gitlab-release-cli

Toolset to create, retrieve and update releases on GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.ocamlPackages.gitlab

Native OCaml bindings to Gitlab REST API v4

  • nixos-unstable -
    • nixos-unstable-small 0.1.8
  • nixos-26.05 -
    • nixos-26.05-small 0.1.8

Package maintainers

Untriaged
Permalink CVE-2026-5377
4.3 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): Low (L)
  • Integrity (I): None (N)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): None (N)
created 5 months ago Activity log
  • Created suggestion 5 months ago
Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that could have allowed an authenticated user to access titles of confidential or private issues in public projects due to improper access control in the issue description rendering process.

Affected products

GitLab
  • <18.11.1

Matching in nixpkgs

pkgs.gitlab

GitLab Community Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ee

GitLab Enterprise Edition

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-art

Pull cross-project Gitlab artifact dependencies

  • nixos-unstable -
    • nixos-unstable-small 0.5.0
  • nixos-26.05 -
    • nixos-26.05-small 0.5.0

pkgs.gitlab-duo

CLI for GitLab AI assistant

  • nixos-unstable -
    • nixos-unstable-small 9.6.0
  • nixos-26.05 -

pkgs.gitlab-kas

Kubernetes Agent (Gitlab side)

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-ls

GitLab CI Language Server (gitlab-ci-ls)

  • nixos-unstable -
    • nixos-unstable-small 1.4.0
  • nixos-26.05 -
    • nixos-26.05-small 1.3.2

pkgs.gitlab-pages

Daemon used to serve static websites for GitLab users

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-shell

SSH access and repository management app for GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.danger-gitlab

Gem that exists to ensure all dependencies are set up for Danger with GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-clippy

Convert clippy warnings into GitLab Code Quality report

  • nixos-unstable -
    • nixos-unstable-small 1.0.3
  • nixos-26.05 -
    • nixos-26.05-small 1.0.3

pkgs.gitlab-runner

GitLab Runner the continuous integration executor of GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-triage

GitLab's issues and merge requests triage, automated

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-ci-local

Run gitlab pipelines locally as shell executor or docker executor

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gitlab-timelogs

CLI utility to support you with your time logs in GitLab

  • nixos-unstable -
    • nixos-unstable-small 0.7.1
  • nixos-26.05 -
    • nixos-26.05-small 0.7.1

pkgs.gitlab-ci-linter

.gitlab-ci.yml lint helper tool

  • nixos-unstable -
    • nixos-unstable-small 2.4.0
  • nixos-26.05 -
    • nixos-26.05-small 2.4.0

pkgs.gitlab-ci-validate

Command line tool to validate .gitlab-ci.yml files

  • nixos-unstable -
    • nixos-unstable-small 0.6.0

pkgs.gitlab-release-cli

Toolset to create, retrieve and update releases on GitLab

  • nixos-unstable -
  • nixos-26.05 -

pkgs.ocamlPackages.gitlab

Native OCaml bindings to Gitlab REST API v4

  • nixos-unstable -
    • nixos-unstable-small 0.1.8
  • nixos-26.05 -
    • nixos-26.05-small 0.1.8

Package maintainers