https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T06:32:08.437602+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2021-39904 BIT-gitlab-2021-39904 2026-10-12T06:32:08.442093+00:00

Affected: Bitnami: gitlab

An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows a Merge Request creator to resolve discussions and apply suggestions after a project owner has locked the Merge Request

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-830 certfr-2021-avi-830 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-12T06:32:08.442136+00:00 certfr-2021-avi-830 https://cve.radiocsirt.org/vuln/cnvd-2021-91183 cnvd-2021-91183 2026-10-12T06:32:08.442156+00:00 cnvd-2021-91183 https://cve.radiocsirt.org/vuln/euvd-2026-30913 EUVD-2026-30913 2026-10-12T06:32:08.442170+00:00 EUVD-2026-30913 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39904 fkie_cve-2021-39904 2026-10-12T06:32:08.442180+00:00

An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows a Merge Request creator to resolve discussions and apply suggestions after a project owner has locked the Merge Request

 https://cve.radiocsirt.org/vuln/ghsa-2mm8-x5g7-wf73 GHSA-2mm8-x5g7-wf73 2026-10-12T06:32:08.442202+00:00

An Improper Access Control vulnerability in the GraphQL API in GitLab CE/EE since version 13.1 allows a Merge Request creator to resolve discussions and apply suggestions after a project owner has locked the Merge Request

 https://cve.radiocsirt.org/vuln/gsd-2021-39904 gsd-2021-39904 2026-10-12T06:32:08.442216+00:00 gsd-2021-39904 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-39904 UBUNTU-CVE-2021-39904 2026-10-12T06:32:08.442225+00:00

Affected: Ubuntu:16.04:LTS: gitlab

An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows a Merge Request creator to resolve discussions and apply suggestions after a project owner has locked the Merge Request