https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T21:52:48.266282+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2024-8311 BIT-gitlab-2024-8311 — Improper Protection of Alternate Path in GitLab 2026-10-05T21:52:48.271878+00:00

Affected: Bitnami: gitlab

An issue was discovered with pipeline execution policies in GitLab EE affecting all versions from 17.2 prior to 17.2.5, 17.3 prior to 17.3.2 which allows authenticated users to bypass variable overwrite protection via inclusion of a CI/CD template.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0769 certfr-2024-avi-0769 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-05T21:52:48.271930+00:00 certfr-2024-avi-0769 https://cve.radiocsirt.org/vuln/euvd-2026-163073 EUVD-2026-163073 2026-10-05T21:52:48.271950+00:00 EUVD-2026-163073 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8311 fkie_cve-2024-8311 2026-10-05T21:52:48.271962+00:00

An issue was discovered with pipeline execution policies in GitLab EE affecting all versions from 17.2 prior to 17.2.5, 17.3 prior to 17.3.2 which allows authenticated users to bypass variable overwrite protection via inclusion of a CI/CD template.

 https://cve.radiocsirt.org/vuln/ghsa-947f-qh3g-pcj5 GHSA-947f-qh3g-pcj5 2026-10-05T21:52:48.271983+00:00

An issue was discovered with pipeline execution policies in GitLab EE affecting all versions from 17.2 prior to 17.2.5, 17.3 prior to 17.3.2 which allows authenticated users to bypass variable overwrite protection via inclusion of a CI/CD template.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2130 WID-SEC-W-2024-2130 — GitLab CE/EE: Mehrere Schwachstellen 2026-10-05T21:52:48.271997+00:00

Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, beliebigen Code auszuführen, erhöhte Rechte zu erlangen und einen Denial-of-Service-Zustand zu erzeugen.