https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:44:23 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-01824 bdu:2026-01824 https://cve.radiocsirt.org/vuln/bdu:2026-01824 https://cve.radiocsirt.org/vuln/bit-gitlab-2025-14560 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized actions on behalf of another user by injecting malicious content into vulnerability code flow.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized actions on behalf of another user by injecting malicious content into vulnerability code flow.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2025-14560 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0146 certfr-2026-avi-0146 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0146 https://cve.radiocsirt.org/vuln/euvd-2026-270916 EUVD-2026-270916 https://cve.radiocsirt.org/vuln/euvd-2026-270916 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14560 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized actions on behalf of another user by injecting malicious content into vulnerability code flow.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized actions on behalf of another user by injecting malicious content into vulnerability code flow.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-14560 https://cve.radiocsirt.org/vuln/ghsa-gvr9-jwjx-g2pq <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized actions on behalf of another user by injecting malicious content into vulnerability code flow.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized actions on behalf of another user by injecting malicious content into vulnerability code flow.</p> https://cve.radiocsirt.org/vuln/ghsa-gvr9-jwjx-g2pq https://cve.radiocsirt.org/vuln/ncsc-2026-0062 NCSC-2026-0062 https://cve.radiocsirt.org/vuln/ncsc-2026-0062 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-14560 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab, Ubuntu:24.04:LTS: gitlab-agent, Ubuntu:25.10: gitlab-agent, Ubuntu:26.04:LTS: gitlab-agent</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized actions on behalf of another user by injecting malicious content into vulnerability code flow.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab, Ubuntu:24.04:LTS: gitlab-agent, Ubuntu:25.10: gitlab-agent, Ubuntu:26.04:LTS: gitlab-agent</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized actions on behalf of another user by injecting malicious content into vulnerability code flow.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-14560 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0380 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial-of-Service-Angriff durchzuführen, Cross-Site-Scripting-Angriffe zu starten, auf nicht autorisierte Daten zuzugreifen oder diese zu ändern oder Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial-of-Service-Angriff durchzuführen, Cross-Site-Scripting-Angriffe zu starten, auf nicht autorisierte Daten zuzugreifen oder diese zu ändern oder Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0380