https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:20:50 +0000 https://cve.radiocsirt.org/vuln/bit-gitlab-2022-2417 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an authenticated and authorised user to import a project that includes branch names which are 40 hexadecimal characters, which could be abused in supply chain attacks where a victim pinned to a specific Git commit of the project.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an authenticated and authorised user to import a project that includes branch names which are 40 hexadecimal characters, which could be abused in supply chain attacks where a victim pinned to a specific Git commit of the project.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2022-2417 https://cve.radiocsirt.org/vuln/certfr-2022-avi-693 certfr-2022-avi-693 https://cve.radiocsirt.org/vuln/certfr-2022-avi-693 https://cve.radiocsirt.org/vuln/euvd-2026-12347 EUVD-2026-12347 https://cve.radiocsirt.org/vuln/euvd-2026-12347 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2417 <p>Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an authenticated and authorised user to import a project that includes branch names which are 40 hexadecimal characters, which could be abused in supply chain attacks where a victim pinned to a specific Git commit of the project.</p> <p>Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an authenticated and authorised user to import a project that includes branch names which are 40 hexadecimal characters, which could be abused in supply chain attacks where a victim pinned to a specific Git commit of the project.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2417 https://cve.radiocsirt.org/vuln/ghsa-99p6-4w5h-vhrg <p>Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an authenticated and authorised user to import a project that includes branch names which are 40 hexadecimal characters, which could be abused in supply chain attacks where a victim pinned to a specific Git commit of the project.</p> <p>Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an authenticated and authorised user to import a project that includes branch names which are 40 hexadecimal characters, which could be abused in supply chain attacks where a victim pinned to a specific Git commit of the project.</p> https://cve.radiocsirt.org/vuln/ghsa-99p6-4w5h-vhrg https://cve.radiocsirt.org/vuln/gsd-2022-2417 gsd-2022-2417 https://cve.radiocsirt.org/vuln/gsd-2022-2417 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2417 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an authenticated and authorised user to import a project that includes branch names which are 40 hexadecimal characters, which could be abused in supply chain attacks where a victim pinned to a specific Git commit of the project.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an authenticated and authorised user to import a project that includes branch names which are 40 hexadecimal characters, which could be abused in supply chain attacks where a victim pinned to a specific Git commit of the project.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2417