https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:10:09.716099+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2025-4979 BIT-gitlab-2025-4979 — Insufficient Granularity of Access Control in GitLab 2026-10-04T10:10:09.728224+00:00

Affected: Bitnami: gitlab

An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. An attacker may be able to reveal masked or hidden CI variables (that they did not author) in the WebUI, by simply creating their own variable and observing the HTTP response.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0437 certfr-2025-avi-0437 — De multiples vulnérabilités ont été découvertes dans GitLab. Elles permettent à un attaquant de provoquer un déni de se… 2026-10-04T10:10:09.728273+00:00 certfr-2025-avi-0437 https://cve.radiocsirt.org/vuln/euvd-2026-240848 EUVD-2026-240848 2026-10-04T10:10:09.728293+00:00 EUVD-2026-240848 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4979 fkie_cve-2025-4979 2026-10-04T10:10:09.728306+00:00

An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. An attacker may be able to reveal masked or hidden CI variables (that they did not author) in the WebUI, by simply creating their own variable and observing the HTTP response.

 https://cve.radiocsirt.org/vuln/ghsa-9vrq-hh79-6v9m GHSA-9vrq-hh79-6v9m 2026-10-04T10:10:09.728327+00:00

An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. An attacker may be able to reveal masked or hidden CI variables (that they did not author) in the WebUI, by simply creating their own variable and observing the HTTP response.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-4979 UBUNTU-CVE-2025-4979 2026-10-04T10:10:09.728341+00:00

Affected: Ubuntu:16.04:LTS: gitlab

An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. An attacker may be able to reveal masked or hidden CI variables (that they did not author) in the WebUI, by simply creating their own variable and observing the HTTP response.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1117 WID-SEC-W-2025-1117 — GitLab: Mehrere Schwachstellen 2026-10-04T10:10:09.728359+00:00

Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service auszulösen oder Informationen auszuspähen.