FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2025-01-25 14:24:43 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
b857606c-0266-11ef-8681-001b217b3468	Gitlab -- vulnerabilities Gitlab reports: GitLab account takeover, under certain conditions, when using Bitbucket as an OAuth provider Path Traversal leads to DoS and Restricted File Read Unauthenticated ReDoS in FileFinder when using wildcard filters in project file search Personal Access Token scopes not honoured by GraphQL subscriptions Domain based restrictions bypass using a crafted email address Discovery 2024-04-24 Entry 2024-04-24 gitlab-ce gitlab-ee >= 16.11.0 lt 16.11.1 >= 16.10.0 lt 16.10.4 >= 7.8.0 lt 16.9.6 CVE-2024-4024 CVE-2024-2434 CVE-2024-2829 CVE-2024-4006 CVE-2024-1347 https://about.gitlab.com/releases/2024/04/24/patch-release-gitlab-16-11-1-released/

VuXML ID

Description

b857606c-0266-11ef-8681-001b217b3468

Gitlab -- vulnerabilities

Gitlab reports:

GitLab account takeover, under certain conditions, when using Bitbucket as an OAuth provider

Path Traversal leads to DoS and Restricted File Read

Unauthenticated ReDoS in FileFinder when using wildcard filters in project file search

Personal Access Token scopes not honoured by GraphQL subscriptions

Domain based restrictions bypass using a crafted email address

Discovery 2024-04-24
Entry 2024-04-24
gitlab-ce
gitlab-ee

>= 16.11.0 lt 16.11.1

>= 16.10.0 lt 16.10.4

>= 7.8.0 lt 16.9.6

CVE-2024-4024
CVE-2024-2434
CVE-2024-2829
CVE-2024-4006
CVE-2024-1347
https://about.gitlab.com/releases/2024/04/24/patch-release-gitlab-16-11-1-released/