<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T01:19:26.996194+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2025-14467</id>
    <title>bdu:2025-14467</title>
    <updated>2026-10-03T01:19:27.000973+00:00</updated>
    <content>bdu:2025-14467</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2025-14467"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bit-gitlab-2025-6945</id>
    <title>BIT-gitlab-2025-6945 — Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab</title>
    <updated>2026-10-03T01:19:27.001015+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Bitnami: gitlab</p>
<p>GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bit-gitlab-2025-6945"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2025-avi-1002</id>
    <title>certfr-2025-avi-1002 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo…</title>
    <updated>2026-10-03T01:19:27.001055+00:00</updated>
    <content>certfr-2025-avi-1002</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2025-avi-1002"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-261124</id>
    <title>EUVD-2026-261124</title>
    <updated>2026-10-03T01:19:27.001074+00:00</updated>
    <content>EUVD-2026-261124</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-261124"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2025-6945</id>
    <title>fkie_cve-2025-6945</title>
    <updated>2026-10-03T01:19:27.001087+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2025-6945"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-r22j-98fp-4fw9</id>
    <title>GHSA-r22j-98fp-4fw9</title>
    <updated>2026-10-03T01:19:27.001110+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-r22j-98fp-4fw9"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-6945</id>
    <title>UBUNTU-CVE-2025-6945</title>
    <updated>2026-10-03T01:19:27.001126+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p>
<p>GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-6945"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2587</id>
    <title>WID-SEC-W-2025-2587 — GitLab: Mehrere Schwachstellen</title>
    <updated>2026-10-03T01:19:27.001144+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen offenzulegen, die Authentifizierung zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2587"/>
  </entry>
</feed>
