https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:31:41.388308+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07398 bdu:2023-07398 2026-10-04T09:31:41.393828+00:00 bdu:2023-07398 https://cve.radiocsirt.org/vuln/bit-gitlab-2023-3932 BIT-gitlab-2023-3932 — Incorrect User Management in GitLab 2026-10-04T09:31:41.393862+00:00

Affected: Bitnami: gitlab

An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies.

 https://cve.radiocsirt.org/vuln/euvd-2026-261384 EUVD-2026-261384 2026-10-04T09:31:41.393901+00:00 EUVD-2026-261384 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3932 fkie_cve-2023-3932 2026-10-04T09:31:41.393915+00:00

An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies.

 https://cve.radiocsirt.org/vuln/ghsa-vvcp-5v5p-8jhc GHSA-vvcp-5v5p-8jhc 2026-10-04T09:31:41.393937+00:00

An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies.

 https://cve.radiocsirt.org/vuln/gsd-2023-3932 gsd-2023-3932 2026-10-04T09:31:41.393952+00:00 gsd-2023-3932 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1945 WID-SEC-W-2023-1945 — GitLab: Mehrere Schwachstellen 2026-10-04T09:31:41.393963+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GitLab ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen preiszugeben, Dateien zu manipulieren oder beliebigen Code auszuführen.