https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:39:46.933867+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2024-4201 BIT-gitlab-2024-4201 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2026-10-03T18:39:46.938101+00:00

Affected: Bitnami: gitlab

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 16.10.7, all versions starting from 16.11 before 16.111.4, all versions starting from 17.0 before 17.0.2. When viewing an XML file in a repository in raw mode, it can be made to render as HTML if viewed under specific circumstances.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0490 certfr-2024-avi-0490 — De multiples vulnérabilités ont été découvertes dans GitLab. Elles permettent à un attaquant de provoquer un déni de se… 2026-10-03T18:39:46.938150+00:00 certfr-2024-avi-0490 https://cve.radiocsirt.org/vuln/euvd-2026-160598 EUVD-2026-160598 2026-10-03T18:39:46.938169+00:00 EUVD-2026-160598 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4201 fkie_cve-2024-4201 2026-10-03T18:39:46.938182+00:00

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 16.10.7, all versions starting from 16.11 before 16.111.4, all versions starting from 17.0 before 17.0.2. When viewing an XML file in a repository in raw mode, it can be made to render as HTML if viewed under specific circumstances.

 https://cve.radiocsirt.org/vuln/ghsa-wq8m-964x-6vr4 GHSA-wq8m-964x-6vr4 2026-10-03T18:39:46.938204+00:00

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 16.10.7, all versions starting from 16.11 before 16.111.4, all versions starting from 17.0 before 17.0.2. When viewing an XML file in a repository in raw mode, it can be made to render as HTML if viewed under specific circumstances.

 https://cve.radiocsirt.org/vuln/gsd-2024-4201 gsd-2024-4201 2026-10-03T18:39:46.938220+00:00 gsd-2024-4201 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-4201 UBUNTU-CVE-2024-4201 2026-10-03T18:39:46.938230+00:00

Affected: Ubuntu:16.04:LTS: gitlab

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 16.10.7, all versions starting from 16.11 before 16.111.4, all versions starting from 17.0 before 17.0.2. When viewing an XML file in a repository in raw mode, it can be made to render as HTML if viewed under specific circumstances.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1367 WID-SEC-W-2024-1367 — GitLab: Mehrere Schwachstellen ermöglichen Denial of Service und Cross-Site Scripting 2026-10-03T18:39:46.938249+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial of Service Angriff durchzuführen und einen Cross-Site-Scripting-Angriff zu starten.