https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:40:42.557950+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2022-4331 BIT-gitlab-2022-4331 2026-10-03T19:40:42.747582+00:00

Affected: Bitnami: gitlab

An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. If a group with SAML SSO enabled is transferred to a new namespace as a child group, it's possible previously removed malicious maintainer or owner of the child group can still gain access to the group via SSO or a SCIM token to perform actions on the group.

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0187 certfr-2023-avi-0187 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-03T19:40:42.747789+00:00 certfr-2023-avi-0187 https://cve.radiocsirt.org/vuln/euvd-2026-219951 EUVD-2026-219951 2026-10-03T19:40:42.747839+00:00 EUVD-2026-219951 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4331 fkie_cve-2022-4331 2026-10-03T19:40:42.747866+00:00

An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. If a group with SAML SSO enabled is transferred to a new namespace as a child group, it's possible previously removed malicious maintainer or owner of the child group can still gain access to the group via SSO or a SCIM token to perform actions on the group.

 https://cve.radiocsirt.org/vuln/ghsa-fh7h-m5x3-9v4g GHSA-fh7h-m5x3-9v4g 2026-10-03T19:40:42.747923+00:00

An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. If a group with SAML SSO enabled is transferred to a new namespace as a child group, it's possible previously removed malicious maintainer or owner of the child group can still gain access to the group via SSO or a SCIM token to perform actions on the group.

 https://cve.radiocsirt.org/vuln/gsd-2022-4331 gsd-2022-4331 2026-10-03T19:40:42.747965+00:00 gsd-2022-4331 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0564 WID-SEC-W-2023-0564 — GitLab: Mehrere Schwachstellen 2026-10-03T19:40:42.747990+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder sonstige Auswirkungen zu verursachen.