https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T10:27:54.896835+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2023-4378 BIT-gitlab-2023-4378 — Insertion of Sensitive Information Into Sent Data in GitLab 2026-10-05T10:27:54.901404+00:00

Affected: Bitnami: gitlab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. A malicious Maintainer can, under specific circumstances, leak the sentry token by changing the configured URL in the Sentry error tracking settings page. This was as a result of an incomplete fix for CVE-2022-4365.

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0707 certfr-2023-avi-0707 — De multiples vulnérabilités ont été découvertes dans <span class="textit">GitLab</span>. Certaines d'entre elles permet… 2026-10-05T10:27:54.901451+00:00 certfr-2023-avi-0707 https://cve.radiocsirt.org/vuln/euvd-2026-292845 EUVD-2026-292845 2026-10-05T10:27:54.901471+00:00 EUVD-2026-292845 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4378 fkie_cve-2023-4378 2026-10-05T10:27:54.901484+00:00

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. A malicious Maintainer can, under specific circumstances, leak the sentry token by changing the configured URL in the Sentry error tracking settings page. This was as a result of an incomplete fix for CVE-2022-4365.

 https://cve.radiocsirt.org/vuln/ghsa-mp7g-3r25-fq9v GHSA-mp7g-3r25-fq9v 2026-10-05T10:27:54.901506+00:00

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. A malicious Maintainer can, under specific circumstances, leak the sentry token by changing the configured URL in the Sentry error tracking settings page. This was as a result of an incomplete fix for CVE-2022-4365.

 https://cve.radiocsirt.org/vuln/gsd-2023-4378 gsd-2023-4378 2026-10-05T10:27:54.901521+00:00 gsd-2023-4378 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4378 UBUNTU-CVE-2023-4378 2026-10-05T10:27:54.901531+00:00

Affected: Ubuntu:16.04:LTS: gitlab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. A malicious Maintainer can, under specific circumstances, leak the sentry token by changing the configured URL in the Sentry error tracking settings page. This was as a result of an incomplete fix for CVE-2022-4365.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2244 WID-SEC-W-2023-2244 — GitLab: Mehrere Schwachstellen 2026-10-05T10:27:54.901549+00:00

Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um8 Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen und seine Privilegien zu erweitern.