Skip to content
OpenAdvisories

Package · Wolfi

gitlab-runner-19.1

34 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-85706 Exploited Public exploit Scanner template EPSS 97%

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitra…

    GitLab GitLab gitlab-runner-19.2 gitlab-runner-helper-19.2 Web / CMS Wolfi
    KEV Sep 11, 2026
  • Critical 9.6
    CVE-2026-39821

    Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

    The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege …

    Go standard library golang.org/x/net net/http net/http/internal/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go