https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:44:57.942825+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2022-2229 BIT-gitlab-2022-2229 2026-10-04T20:44:57.947045+00:00

Affected: Bitnami: gitlab

An improper authorization issue in GitLab CE/EE affecting all versions from 13.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to extract the value of an unprotected variable they know the name of in public projects or private projects they're a member of.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-598 certfr-2022-avi-598 — De multiples vulnérabilités ont été découvertes dans les produits GitLab. Certaines d'entre elles permettent à un attaq… 2026-10-04T20:44:57.947094+00:00 certfr-2022-avi-598 https://cve.radiocsirt.org/vuln/euvd-2026-12267 EUVD-2026-12267 2026-10-04T20:44:57.947114+00:00 EUVD-2026-12267 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2229 fkie_cve-2022-2229 2026-10-04T20:44:57.947127+00:00

An improper authorization issue in GitLab CE/EE affecting all versions from 13.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to extract the value of an unprotected variable they know the name of in public projects or private projects they're a member of.

 https://cve.radiocsirt.org/vuln/ghsa-c63c-249m-g37m GHSA-c63c-249m-g37m 2026-10-04T20:44:57.947149+00:00

An improper authorization issue in GitLab CE/EE affecting all versions from 13.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to extract the value of an unprotected variable they know the name of in public projects or private projects they're a member of.

 https://cve.radiocsirt.org/vuln/gsd-2022-2229 gsd-2022-2229 2026-10-04T20:44:57.947164+00:00 gsd-2022-2229 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2229 UBUNTU-CVE-2022-2229 2026-10-04T20:44:57.947174+00:00

Affected: Ubuntu:16.04:LTS: gitlab

An improper authorization issue in GitLab CE/EE affecting all versions from 13.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to extract the value of an unprotected variable they know the name of in public projects or private projects they're a member of.