https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:23:44.128246+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2026-15831 BIT-gitlab-2026-15831 — Generation of Incorrect Security Tokens in GitLab 2026-10-04T03:23:44.133849+00:00

Affected: Bitnami: gitlab

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.3 and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to bypass administrator-configured tool governance policies due to improper authorization enforcement during token generation.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0946 certfr-2026-avi-0946 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-04T03:23:44.133897+00:00 certfr-2026-avi-0946 https://cve.radiocsirt.org/vuln/euvd-2026-342524 EUVD-2026-342524 2026-10-04T03:23:44.133917+00:00 EUVD-2026-342524 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15831 fkie_cve-2026-15831 2026-10-04T03:23:44.133930+00:00

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.3 and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to bypass administrator-configured tool governance policies due to improper authorization enforcement during token generation.

 https://cve.radiocsirt.org/vuln/ghsa-w973-7qcg-m257 GHSA-w973-7qcg-m257 2026-10-04T03:23:44.133951+00:00

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.3 and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to bypass administrator-configured tool governance policies due to improper authorization enforcement during token generation.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0270 NCSC-2026-0270 — Kwetsbaarheden verholpen in GitLab door GitLab Inc. 2026-10-04T03:23:44.133965+00:00 NCSC-2026-0270 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2586 WID-SEC-W-2026-2586 — GitLab: Mehrere Schwachstellen 2026-10-04T03:23:44.133987+00:00

Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.