https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:32:21 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-02071 bdu:2026-02071 https://cve.radiocsirt.org/vuln/bdu:2026-02071 https://cve.radiocsirt.org/vuln/bit-gitlab-2025-13781 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to modify instance-wide AI feature provider settings by exploiting missing authorization checks in GraphQL mutations.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to modify instance-wide AI feature provider settings by exploiting missing authorization checks in GraphQL mutations.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2025-13781 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0014 certfr-2026-avi-0014 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0014 https://cve.radiocsirt.org/vuln/euvd-2026-265302 EUVD-2026-265302 https://cve.radiocsirt.org/vuln/euvd-2026-265302 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13781 <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to modify instance-wide AI feature provider settings by exploiting missing authorization checks in GraphQL mutations.</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to modify instance-wide AI feature provider settings by exploiting missing authorization checks in GraphQL mutations.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-13781 https://cve.radiocsirt.org/vuln/ghsa-p7gw-xwgf-7w7c <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to modify instance-wide AI feature provider settings by exploiting missing authorization checks in GraphQL mutations.</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to modify instance-wide AI feature provider settings by exploiting missing authorization checks in GraphQL mutations.</p> https://cve.radiocsirt.org/vuln/ghsa-p7gw-xwgf-7w7c https://cve.radiocsirt.org/vuln/ncsc-2026-0003 NCSC-2026-0003 https://cve.radiocsirt.org/vuln/ncsc-2026-0003 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0037 <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0037