GitLab Patch Release: 18.9.8, 18.8.10, 18.7.7, 18.6.8, 18.5.7

Today, we are releasing versions 18.9.8, 18.8.10, 18.7.7, 18.6.8, and 18.5.7 for GitLab Community Edition and Enterpri

历史摘要 · 未重新核验 · GitLab Security Releases

GitLab Patch Release: 18.11.3, 18.10.6, 18.9.7

CVE-2026-7481

On May 13, 2026, we released versions 18.11.3, 18.10.6, 18.9.7 for GitLab Community Edition (CE) and Enterprise Editi

历史摘要 · 未重新核验 · GitLab Security Releases

No Title

[MOCK] 这是一个厂商公告的伪摘要: No Title

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

### Impact The output of `cilium-bugtool` can contain sensitive data when the tool is run against Cilium deployments wit

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

## Summary After a note-mark owner soft-deletes a public book, its notes and uploaded assets stay readable at `/api/not

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

## Summary `IsPasswordMatch` in `backend/db/models.go` falls back to a hard-coded `bcrypt("null")` placeholder whenever

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

**Summary** The zrok WebDAV drive backend (davServer.Dir) restricts path traversal through lexical normalization but doe

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

### Summary Heimdall performs rule matching on the raw (non-normalized) request path, while downstream components may n

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

CVE-2023-40267

### Summary `_clone()` validates `multi_options` as the original list, then executes `shlex.split(" ".join(multi_option

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

[MOCK] 这是一个厂商公告的伪摘要: No Title

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

[MOCK] 这是一个厂商公告的伪摘要: No Title

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

### Summary GitPython blocks dangerous Git options such as `--upload-pack` and `--receive-pack` by default, but the equi

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

[MOCK] 这是一个厂商公告的伪摘要: No Title

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

[MOCK] 这是一个厂商公告的伪摘要: No Title

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

[MOCK] 这是一个厂商公告的伪摘要: No Title

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026

历史摘要 · 未重新核验 · GitHub Security Advisories