https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T21:01:18.537321+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2021-39895 BIT-gitlab-2021-39895 2026-10-10T21:01:18.643399+00:00

Affected: Bitnami: gitlab

In all versions of GitLab CE/EE since version 8.0, an attacker can set the pipeline schedules to be active in a project export so when an unsuspecting owner imports that project, pipelines are active by default on that project. Under specialized conditions, this may lead to information disclosure if the project is imported from an untrusted source.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-830 certfr-2021-avi-830 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-10T21:01:18.643454+00:00 certfr-2021-avi-830 https://cve.radiocsirt.org/vuln/cnvd-2021-91177 cnvd-2021-91177 2026-10-10T21:01:18.643477+00:00 cnvd-2021-91177 https://cve.radiocsirt.org/vuln/euvd-2026-30935 EUVD-2026-30935 2026-10-10T21:01:18.643490+00:00 EUVD-2026-30935 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39895 fkie_cve-2021-39895 2026-10-10T21:01:18.643501+00:00

In all versions of GitLab CE/EE since version 8.0, an attacker can set the pipeline schedules to be active in a project export so when an unsuspecting owner imports that project, pipelines are active by default on that project. Under specialized conditions, this may lead to information disclosure if the project is imported from an untrusted source.

 https://cve.radiocsirt.org/vuln/ghsa-c3rv-jv45-94rx GHSA-c3rv-jv45-94rx 2026-10-10T21:01:18.643524+00:00

In all versions of GitLab CE/EE since version 8.0, an attacker can set the pipeline schedules to be active in a project export so when an unsuspecting owner imports that project, pipelines are active by default on that project. Under specialized conditions, this may lead to information disclosure if the project is imported from an untrusted source.

 https://cve.radiocsirt.org/vuln/gsd-2021-39895 gsd-2021-39895 2026-10-10T21:01:18.643540+00:00 gsd-2021-39895 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-39895 UBUNTU-CVE-2021-39895 2026-10-10T21:01:18.643550+00:00

Affected: Ubuntu:16.04:LTS: gitlab

In all versions of GitLab CE/EE since version 8.0, an attacker can set the pipeline schedules to be active in a project export so when an unsuspecting owner imports that project, pipelines are active by default on that project. Under specialized conditions, this may lead to information disclosure if the project is imported from an untrusted source.