https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T14:16:44.431650+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2024-4660 BIT-gitlab-2024-4660 — Missing Authorization in GitLab 2026-10-05T14:16:44.435250+00:00

Affected: Bitnami: gitlab

An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2. It was possible for a guest to read the source code of a private project by using group templates.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0769 certfr-2024-avi-0769 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-05T14:16:44.435297+00:00 certfr-2024-avi-0769 https://cve.radiocsirt.org/vuln/euvd-2026-163068 EUVD-2026-163068 2026-10-05T14:16:44.435317+00:00 EUVD-2026-163068 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4660 fkie_cve-2024-4660 2026-10-05T14:16:44.435330+00:00

An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2. It was possible for a guest to read the source code of a private project by using group templates.

 https://cve.radiocsirt.org/vuln/ghsa-2c6m-54c4-x2fg GHSA-2c6m-54c4-x2fg 2026-10-05T14:16:44.435351+00:00

An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2. It was possible for a guest to read the source code of a private project by using group templates.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2130 WID-SEC-W-2024-2130 — GitLab CE/EE: Mehrere Schwachstellen 2026-10-05T14:16:44.435365+00:00

Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, beliebigen Code auszuführen, erhöhte Rechte zu erlangen und einen Denial-of-Service-Zustand zu erzeugen.