https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:00:53.378412+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-10768 bdu:2026-10768 2026-10-03T08:00:53.458645+00:00 bdu:2026-10768 https://cve.radiocsirt.org/vuln/bit-gitlab-2026-3093 BIT-gitlab-2026-3093 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2026-10-03T08:00:53.458681+00:00

Affected: Bitnami: gitlab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper sanitization of user-controlled input.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0946 certfr-2026-avi-0946 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-03T08:00:53.458718+00:00 certfr-2026-avi-0946 https://cve.radiocsirt.org/vuln/euvd-2026-342529 EUVD-2026-342529 2026-10-03T08:00:53.458737+00:00 EUVD-2026-342529 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3093 fkie_cve-2026-3093 2026-10-03T08:00:53.458765+00:00

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper sanitization of user-controlled input.

 https://cve.radiocsirt.org/vuln/ghsa-2rc9-8cx9-fxpr GHSA-2rc9-8cx9-fxpr 2026-10-03T08:00:53.458803+00:00

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper sanitization of user-controlled input.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0270 NCSC-2026-0270 — Kwetsbaarheden verholpen in GitLab door GitLab Inc. 2026-10-03T08:00:53.458832+00:00 NCSC-2026-0270 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2586 WID-SEC-W-2026-2586 — GitLab: Mehrere Schwachstellen 2026-10-03T08:00:53.458880+00:00

Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.