https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:35:55.966207+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2026-87719 BIT-gitlab-2026-87719 — Deserialization of Untrusted Data in GitLab 2026-10-02T12:35:56.059933+00:00

Affected: Bitnami: gitlab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could allow an authenticated user with Duo Chat access to obtain Advanced Search instance configurations and sensitive credentials using a specially crafted GraphQL subscription argument to bypass serialization and perform server object lookup.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1160 certfr-2026-avi-1160 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-02T12:35:56.059986+00:00 certfr-2026-avi-1160 https://cve.radiocsirt.org/vuln/euvd-2026-374422 EUVD-2026-374422 2026-10-02T12:35:56.060005+00:00 EUVD-2026-374422 https://cve.radiocsirt.org/vuln/fkie_cve-2026-87719 fkie_cve-2026-87719 2026-10-02T12:35:56.060018+00:00

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could allow an authenticated user with Duo Chat access to obtain Advanced Search instance configurations and sensitive credentials using a specially crafted GraphQL subscription argument to bypass serialization and perform server object lookup.

 https://cve.radiocsirt.org/vuln/ghsa-prp4-5w2g-8v2c GHSA-prp4-5w2g-8v2c 2026-10-02T12:35:56.060041+00:00

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could allow an authenticated user with Duo Chat access to obtain Advanced Search instance configurations and sensitive credentials using a specially crafted GraphQL subscription argument to bypass serialization and perform server object lookup.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3315 WID-SEC-W-2026-3315 — GitLab: Mehrere Schwachstellen 2026-10-02T12:35:56.060057+00:00

Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, sensible Informationen oder Anmeldedaten offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen oder Denial-of-Service-Zustände zu verursachen.