<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T20:39:42.373136+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2025-14459</id>
    <title>bdu:2025-14459</title>
    <updated>2026-10-03T20:39:42.377670+00:00</updated>
    <content>bdu:2025-14459</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2025-14459"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bit-gitlab-2025-11990</id>
    <title>BIT-gitlab-2025-11990 — Improper Handling of URL Encoding (Hex Encoding) in GitLab</title>
    <updated>2026-10-03T20:39:42.377701+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Bitnami: gitlab</p>
<p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bit-gitlab-2025-11990"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2025-avi-1002</id>
    <title>certfr-2025-avi-1002 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo…</title>
    <updated>2026-10-03T20:39:42.377733+00:00</updated>
    <content>certfr-2025-avi-1002</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2025-avi-1002"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-261116</id>
    <title>EUVD-2026-261116</title>
    <updated>2026-10-03T20:39:42.377750+00:00</updated>
    <content>EUVD-2026-261116</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-261116"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2025-11990</id>
    <title>fkie_cve-2025-11990</title>
    <updated>2026-10-03T20:39:42.377762+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2025-11990"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-cf8f-2f35-r5wx</id>
    <title>GHSA-cf8f-2f35-r5wx</title>
    <updated>2026-10-03T20:39:42.377782+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-cf8f-2f35-r5wx"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11990</id>
    <title>UBUNTU-CVE-2025-11990</title>
    <updated>2026-10-03T20:39:42.377796+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p>
<p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11990"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2587</id>
    <title>WID-SEC-W-2025-2587 — GitLab: Mehrere Schwachstellen</title>
    <updated>2026-10-03T20:39:42.377814+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen offenzulegen, die Authentifizierung zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2587"/>
  </entry>
</feed>
