<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T08:39:30.434328+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bit-gitlab-2023-2022</id>
    <title>BIT-gitlab-2023-2022 — Missing Authorization in GitLab</title>
    <updated>2026-10-03T08:39:30.521977+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Bitnami: gitlab</p>
<p>An issue has been discovered in GitLab CE/EE affecting all versions starting before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2, which leads to developers being able to create pipeline schedules on protected branches even if they don't have access to merge</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bit-gitlab-2023-2022"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2023-avi-0610</id>
    <title>certfr-2023-avi-0610 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines
d'entre elles permettent à un attaquant de provo…</title>
    <updated>2026-10-03T08:39:30.522033+00:00</updated>
    <content>certfr-2023-avi-0610</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2023-avi-0610"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-261367</id>
    <title>EUVD-2026-261367</title>
    <updated>2026-10-03T08:39:30.522054+00:00</updated>
    <content>EUVD-2026-261367</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-261367"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2023-2022</id>
    <title>fkie_cve-2023-2022</title>
    <updated>2026-10-03T08:39:30.522067+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>An issue has been discovered in GitLab CE/EE affecting all versions starting before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2, which leads to developers being able to create pipeline schedules on protected branches even if they don't have access to merge</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2023-2022"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-3cgp-mpf6-c8vw</id>
    <title>GHSA-3cgp-mpf6-c8vw</title>
    <updated>2026-10-03T08:39:30.522091+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>An issue has been discovered in GitLab CE/EE affecting all versions starting before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2, which leads to developers being able to create pipeline schedules on protected branches even if they don't have access to merge</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-3cgp-mpf6-c8vw"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2023-2022</id>
    <title>gsd-2023-2022</title>
    <updated>2026-10-03T08:39:30.522107+00:00</updated>
    <content>gsd-2023-2022</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2023-2022"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-2022</id>
    <title>UBUNTU-CVE-2023-2022</title>
    <updated>2026-10-03T08:39:30.522118+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p>
<p>An issue has been discovered in GitLab CE/EE affecting all versions starting before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2, which leads to developers being able to create pipeline schedules on protected branches even if they don't have access to merge</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-2022"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1945</id>
    <title>WID-SEC-W-2023-1945 — GitLab: Mehrere Schwachstellen</title>
    <updated>2026-10-03T08:39:30.522137+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GitLab ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen preiszugeben, Dateien zu manipulieren oder beliebigen Code auszuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1945"/>
  </entry>
</feed>
