https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:22:03.567345+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2023-4002 BIT-gitlab-2023-4002 — Insertion of Sensitive Information Into Sent Data in GitLab 2026-10-04T10:22:03.571429+00:00

Affected: Bitnami: gitlab

An issue has been discovered in GitLab EE affecting all versions starting from 14.1 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for EE-licensed users to link any security policy project by its ID to projects or groups the user has access to, potentially revealing the security projects's configured security policies.

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0610 certfr-2023-avi-0610 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-04T10:22:03.571500+00:00 certfr-2023-avi-0610 https://cve.radiocsirt.org/vuln/euvd-2026-323705 EUVD-2026-323705 2026-10-04T10:22:03.571522+00:00 EUVD-2026-323705 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4002 fkie_cve-2023-4002 2026-10-04T10:22:03.571535+00:00

An issue has been discovered in GitLab EE affecting all versions starting from 14.1 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for EE-licensed users to link any security policy project by its ID to projects or groups the user has access to, potentially revealing the security projects's configured security policies.

 https://cve.radiocsirt.org/vuln/ghsa-fh9c-h28h-pf65 GHSA-fh9c-h28h-pf65 2026-10-04T10:22:03.571560+00:00

An issue has been discovered in GitLab EE affecting all versions starting from 14.1 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for EE-licensed users to link any security policy project by its ID to projects or groups the user has access to, potentially revealing the security projects's configured security policies.

 https://cve.radiocsirt.org/vuln/gsd-2023-4002 gsd-2023-4002 2026-10-04T10:22:03.571577+00:00 gsd-2023-4002 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1945 WID-SEC-W-2023-1945 — GitLab: Mehrere Schwachstellen 2026-10-04T10:22:03.571588+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GitLab ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen preiszugeben, Dateien zu manipulieren oder beliebigen Code auszuführen.