BSD PortsGitlab -- Vulnerabilities
· CVE-2026-18252, CVE-2026-77801, CVE-2025-10903, CVE-2026-3035, CVE-2026-4398, CVE-2026-15387, CVE-2026-7487 · VuXML entry
Gitlab reports: Inclusion of Functionality from Untrusted Control Sphere issue in Duo Claude AI agent impacts GitLab EE Denial of Service issue in import pipeline impacts GitLab CE/EE Denial of Service issue in SCIM API impacts GitLab EE Improper Access Control issue in protected environments impacts GitLab EE Authorization Bypass issue in compliance framework assignment impacts GitLab EE Improper Handling of …
Affected versions
- gitlab-ce, gitlab-ee >= 19.3.0 < 19.3.1; >= 19.2.0 < 19.2.5; >= 11.3.0 < 19.1.7
By system
0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| FreeBSD | www/gitlab | 19.5.1_2 | fixed | |
| MidnightBSD | www/gitlab | ${GITLAB_VERSION}_${GITLAB_PORTREVISION} | out of range, by version |