https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 23:26:18 +0000 https://cve.radiocsirt.org/vuln/bit-gitlab-2025-14594 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to view certain pipeline values by querying the API.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to view certain pipeline values by querying the API.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2025-14594 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0146 certfr-2026-avi-0146 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0146 https://cve.radiocsirt.org/vuln/euvd-2026-268053 EUVD-2026-268053 https://cve.radiocsirt.org/vuln/euvd-2026-268053 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14594 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to view certain pipeline values by querying the API.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to view certain pipeline values by querying the API.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-14594 https://cve.radiocsirt.org/vuln/ghsa-3c27-7487-m6fw <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to view certain pipeline values by querying the API.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to view certain pipeline values by querying the API.</p> https://cve.radiocsirt.org/vuln/ghsa-3c27-7487-m6fw https://cve.radiocsirt.org/vuln/ncsc-2026-0062 NCSC-2026-0062 https://cve.radiocsirt.org/vuln/ncsc-2026-0062 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-14594 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab, Ubuntu:24.04:LTS: gitlab-agent, Ubuntu:25.10: gitlab-agent, Ubuntu:26.04:LTS: gitlab-agent</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to view certain pipeline values by querying the API.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab, Ubuntu:24.04:LTS: gitlab-agent, Ubuntu:25.10: gitlab-agent, Ubuntu:26.04:LTS: gitlab-agent</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to view certain pipeline values by querying the API.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-14594 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0380 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial-of-Service-Angriff durchzuführen, Cross-Site-Scripting-Angriffe zu starten, auf nicht autorisierte Daten zuzugreifen oder diese zu ändern oder Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial-of-Service-Angriff durchzuführen, Cross-Site-Scripting-Angriffe zu starten, auf nicht autorisierte Daten zuzugreifen oder diese zu ändern oder Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0380