https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:41:36.087347+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-378826 EUVD-2026-378826 2026-10-07T02:41:36.134195+00:00 EUVD-2026-378826 https://cve.radiocsirt.org/vuln/fkie_cve-2026-88880 fkie_cve-2026-88880 2026-10-07T02:41:36.134234+00:00

Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing malicious servers to redirect credential-bearing requests. Attackers controlling a compromised GitLab server can specify a Link header pointing to attacker-controlled infrastructure to exfiltrate authentication credentials.

 https://cve.radiocsirt.org/vuln/ghsa-wqcg-39wp-gpqc GHSA-wqcg-39wp-gpqc 2026-10-07T02:41:36.134267+00:00

Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing malicious servers to redirect credential-bearing requests. Attackers controlling a compromised GitLab server can specify a Link header pointing to attacker-controlled infrastructure to exfiltrate authentication credentials.