Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/gitlab@14.2.2-1
purl pkg:alpm/archlinux/gitlab@14.2.2-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-ss7h-4jqj-rycp The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses CVE-2021-22258
VCID-tfat-25ty-rfgj An issue has been discovered in GitLab affecting all versions starting with 13.3. GitLab was vulnerable to a stored XSS by using the design feature in issues. CVE-2021-22238
VCID-ykmk-ymk1-b3a6 An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions starting from 14.2 before 14.2.2. The route for /user.keys is not restricted on instances with public visibility disabled. This allows user enumeration on such instances. CVE-2021-22257

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:26:35.956448+00:00 Arch Linux Importer Fixing VCID-tfat-25ty-rfgj https://security.archlinux.org/AVG-2335 38.0.0
2026-04-01T18:26:35.933010+00:00 Arch Linux Importer Fixing VCID-ykmk-ymk1-b3a6 https://security.archlinux.org/AVG-2335 38.0.0
2026-04-01T18:26:35.909850+00:00 Arch Linux Importer Fixing VCID-ss7h-4jqj-rycp https://security.archlinux.org/AVG-2335 38.0.0