https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:05:52.332189+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2023-3950 BIT-gitlab-2023-3950 — Cleartext Storage of Sensitive Information in GitLab 2026-10-03T20:05:52.336215+00:00

Affected: Bitnami: gitlab

An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1 allowed other Group Owners to see the Public Key for a Google Cloud Logging audit event streaming destination, if configured. Owners can now only write the key, not read it.

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0707 certfr-2023-avi-0707 — De multiples vulnérabilités ont été découvertes dans <span class="textit">GitLab</span>. Certaines d'entre elles permet… 2026-10-03T20:05:52.336270+00:00 certfr-2023-avi-0707 https://cve.radiocsirt.org/vuln/euvd-2026-308651 EUVD-2026-308651 2026-10-03T20:05:52.336291+00:00 EUVD-2026-308651 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3950 fkie_cve-2023-3950 2026-10-03T20:05:52.336305+00:00

An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1 allowed other Group Owners to see the Public Key for a Google Cloud Logging audit event streaming destination, if configured. Owners can now only write the key, not read it.

 https://cve.radiocsirt.org/vuln/ghsa-5xhg-wqm3-8ww2 GHSA-5xhg-wqm3-8ww2 2026-10-03T20:05:52.336327+00:00

An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1 allowed other Group Owners to see the Public Key for a Google Cloud Logging audit event streaming destination, if configured. Owners can now only write the key, not read it.

 https://cve.radiocsirt.org/vuln/gsd-2023-3950 gsd-2023-3950 2026-10-03T20:05:52.336342+00:00 gsd-2023-3950 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2244 WID-SEC-W-2023-2244 — GitLab: Mehrere Schwachstellen 2026-10-03T20:05:52.336353+00:00

Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um8 Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen und seine Privilegien zu erweitern.