Developer Tools

In Kubernetes in earlier versions a high severity vulnerability CVE-2026-92574 was detected. This vulnerability allows a user with pod creation privileges to bypass security context restrictions. To address this issue, users should upgrade Kubernetes to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-92574.

In GitLab versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 a low severity vulnerability CVE-2026-3855 was detected. This vulnerability allows an authenticated user with project-level permissions to access restricted file contents on the server or cause denial of service. To address this issue, users should upgrade GitLab to version 19.1.8 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-3855.

In Apache ActiveMQ versions prior to 5.19.11 a high severity vulnerability CVE-2026-74761 was detected. This vulnerability allows an authenticated client to spoof their clientId when removing a durable topic subscription. To address this issue, users should upgrade Apache ActiveMQ to version 5.19.11 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-74761.

In the Portworx Operator component for OpenShift a high severity vulnerability CVE-2026-15140 was detected. This vulnerability allows a user with limited permissions to escalate privileges within the Kubernetes cluster. To address this issue, users should upgrade Portworx Operator to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15140.

In Forgejo versions 15.0.4 and earlier a medium severity vulnerability CVE-2026-82556 was detected. This vulnerability allows a remote attacker to exploit a server-side request forgery (SSRF) issue. To address this issue, users should upgrade Forgejo to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-82556.

In GitLab CE/EE versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 a critical severity vulnerability CVE-2026-19478 was detected. This vulnerability allows an unauthenticated remote attacker to modify or delete public projects and user data, leading to severe data integrity compromise and potential data loss. This occurs due to an Improper Control of Generation of Code (Code Injection) flaw. Under certain conditions, an attacker can supply malicious input via a GraphQL directive that is improperly validated, tricking the application into executing unauthorized operations. To address this issue, users should upgrade GitLab CE/EE to versions 18.11.11, 19.0.8, 19.1.6, 19.2.4, or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19478.

In OpenShift a high severity vulnerability CVE-2026-15218 was detected. This vulnerability allows an attacker to gain excessive permissions on the cluster. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15218.

In @fastify/busboy component for Node versions 3.1.0 through 3.2.0 a high severity vulnerability CVE-2026-19484 was detected. This vulnerability allows a remote unauthenticated attacker to stall the Node.js event loop. To address this issue, users should upgrade @fastify/busboy to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19484.

In GitLab EE versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 a high severity vulnerability CVE-2026-19228 was detected. This vulnerability allows an authenticated user to cause their AI usage to be attributed to another namespace. This occurs due to an Authorization Bypass Through User-Controlled Key flaw, where identity information supplied in requests is improperly authorized. By manipulating this information under certain conditions, an attacker can bypass intended access controls and shift AI usage accounting to a different tenant or namespace. To address this issue, users should upgrade GitLab EE to versions 19.1.4, 19.2.2, or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19228.