https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:09:33.129355+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2026-19619 BIT-gitlab-2026-19619 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2026-10-03T04:09:33.133390+00:00

Affected: Bitnami: gitlab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to execute arbitrary JavaScript in the context of a targeted user's session due to improper sanitization of pasted HTML content in the Content Editor.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1160 certfr-2026-avi-1160 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-03T04:09:33.133442+00:00 certfr-2026-avi-1160 https://cve.radiocsirt.org/vuln/euvd-2026-369812 EUVD-2026-369812 2026-10-03T04:09:33.133462+00:00 EUVD-2026-369812 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19619 fkie_cve-2026-19619 2026-10-03T04:09:33.133475+00:00

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to execute arbitrary JavaScript in the context of a targeted user's session due to improper sanitization of pasted HTML content in the Content Editor.

 https://cve.radiocsirt.org/vuln/ghsa-q86m-h56q-9rjq GHSA-q86m-h56q-9rjq 2026-10-03T04:09:33.133497+00:00

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to execute arbitrary JavaScript in the context of a targeted user's session due to improper sanitization of pasted HTML content in the Content Editor.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3315 WID-SEC-W-2026-3315 — GitLab: Mehrere Schwachstellen 2026-10-03T04:09:33.133513+00:00

Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, sensible Informationen oder Anmeldedaten offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen oder Denial-of-Service-Zustände zu verursachen.