https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 10:06:40 +0000 https://cve.radiocsirt.org/vuln/bit-gitlab-2021-39915 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker to see the names of project access tokens on arbitrary projects</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker to see the names of project access tokens on arbitrary projects</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2021-39915 https://cve.radiocsirt.org/vuln/certfr-2021-avi-921 certfr-2021-avi-921 https://cve.radiocsirt.org/vuln/certfr-2021-avi-921 https://cve.radiocsirt.org/vuln/euvd-2026-30934 EUVD-2026-30934 https://cve.radiocsirt.org/vuln/euvd-2026-30934 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39915 <p>Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker to see the names of project access tokens on arbitrary projects</p> <p>Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker to see the names of project access tokens on arbitrary projects</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-39915 https://cve.radiocsirt.org/vuln/ghsa-v4qw-4358-7wh4 <p>Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker to see the names of project access tokens on arbitrary projects</p> <p>Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker to see the names of project access tokens on arbitrary projects</p> https://cve.radiocsirt.org/vuln/ghsa-v4qw-4358-7wh4 https://cve.radiocsirt.org/vuln/gsd-2021-39915 gsd-2021-39915 https://cve.radiocsirt.org/vuln/gsd-2021-39915 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-39915 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker to see the names of project access tokens on arbitrary projects</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker to see the names of project access tokens on arbitrary projects</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-39915 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0292 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0292