https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:37:57 +0000 https://cve.radiocsirt.org/vuln/bit-gitlab-2025-14592 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized operations by submitting GraphQL mutations through the GLQL API endpoint.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized operations by submitting GraphQL mutations through the GLQL API endpoint.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2025-14592 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0146 certfr-2026-avi-0146 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0146 https://cve.radiocsirt.org/vuln/euvd-2026-268054 EUVD-2026-268054 https://cve.radiocsirt.org/vuln/euvd-2026-268054 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14592 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized operations by submitting GraphQL mutations through the GLQL API endpoint.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized operations by submitting GraphQL mutations through the GLQL API endpoint.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-14592 https://cve.radiocsirt.org/vuln/ghsa-xfh9-f34g-8fm7 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized operations by submitting GraphQL mutations through the GLQL API endpoint.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized operations by submitting GraphQL mutations through the GLQL API endpoint.</p> https://cve.radiocsirt.org/vuln/ghsa-xfh9-f34g-8fm7 https://cve.radiocsirt.org/vuln/ncsc-2026-0062 NCSC-2026-0062 https://cve.radiocsirt.org/vuln/ncsc-2026-0062 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-14592 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab, Ubuntu:24.04:LTS: gitlab-agent, Ubuntu:25.10: gitlab-agent, Ubuntu:26.04:LTS: gitlab-agent</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized operations by submitting GraphQL mutations through the GLQL API endpoint.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab, Ubuntu:24.04:LTS: gitlab-agent, Ubuntu:25.10: gitlab-agent, Ubuntu:26.04:LTS: gitlab-agent</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized operations by submitting GraphQL mutations through the GLQL API endpoint.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-14592 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0380 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial-of-Service-Angriff durchzuführen, Cross-Site-Scripting-Angriffe zu starten, auf nicht autorisierte Daten zuzugreifen oder diese zu ändern oder Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial-of-Service-Angriff durchzuführen, Cross-Site-Scripting-Angriffe zu starten, auf nicht autorisierte Daten zuzugreifen oder diese zu ändern oder Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0380