https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:42:00 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-07007 bdu:2026-07007 https://cve.radiocsirt.org/vuln/bdu:2026-07007 https://cve.radiocsirt.org/vuln/bit-gitlab-2025-12669 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to inject HTML and JavaScript into email notifications sent to other users due to improper input sanitization.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to inject HTML and JavaScript into email notifications sent to other users due to improper input sanitization.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2025-12669 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0593 certfr-2026-avi-0593 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0593 https://cve.radiocsirt.org/vuln/euvd-2026-318562 EUVD-2026-318562 https://cve.radiocsirt.org/vuln/euvd-2026-318562 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12669 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to inject HTML and JavaScript into email notifications sent to other users due to improper input sanitization.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to inject HTML and JavaScript into email notifications sent to other users due to improper input sanitization.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-12669 https://cve.radiocsirt.org/vuln/ghsa-jfvv-q6f6-m4g5 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to inject HTML and JavaScript into email notifications sent to other users due to improper input sanitization.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to inject HTML and JavaScript into email notifications sent to other users due to improper input sanitization.</p> https://cve.radiocsirt.org/vuln/ghsa-jfvv-q6f6-m4g5 https://cve.radiocsirt.org/vuln/ncsc-2026-0161 NCSC-2026-0161 https://cve.radiocsirt.org/vuln/ncsc-2026-0161 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-12669 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to inject HTML and JavaScript into email notifications sent to other users due to improper input sanitization.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to inject HTML and JavaScript into email notifications sent to other users due to improper input sanitization.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-12669 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1523 <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1523