https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:51:09.050515+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2024-4597 BIT-gitlab-2024-4597 — Cross-Site Request Forgery (CSRF) in GitLab 2026-10-03T15:51:09.054174+00:00

Affected: Bitnami: gitlab

An issue has been discovered in GitLab EE affecting all versions from 16.7 before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions starting from 16.11 before 16.11.2. An attacker could force a user with an active SAML session to approve an MR via CSRF.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0376 certfr-2024-avi-0376 — De multiples vulnérabilités ont été découvertes dans <span class="textit">GitLab</span>. Elles permettent à un attaquan… 2026-10-03T15:51:09.054220+00:00 certfr-2024-avi-0376 https://cve.radiocsirt.org/vuln/euvd-2026-160602 EUVD-2026-160602 2026-10-03T15:51:09.054240+00:00 EUVD-2026-160602 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4597 fkie_cve-2024-4597 2026-10-03T15:51:09.054253+00:00

An issue has been discovered in GitLab EE affecting all versions from 16.7 before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions starting from 16.11 before 16.11.2. An attacker could force a user with an active SAML session to approve an MR via CSRF.

 https://cve.radiocsirt.org/vuln/ghsa-7xp2-7fx4-46xp GHSA-7xp2-7fx4-46xp 2026-10-03T15:51:09.054274+00:00

An issue has been discovered in GitLab EE affecting all versions from 16.7 before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions starting from 16.11 before 16.11.2. An attacker could force a user with an active SAML session to approve an MR via CSRF.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1073 WID-SEC-W-2024-1073 — GitLab: Mehrere Schwachstellen 2026-10-03T15:51:09.054288+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsmechanismen zu umgehen und um Informationen offenzulegen.