https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 02:22:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-07921 bdu:2025-07921 https://cve.radiocsirt.org/vuln/bdu:2025-07921 https://cve.radiocsirt.org/vuln/bit-gitlab-2025-5846 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue has been discovered in GitLab EE affecting all versions from 16.10 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated users to assign unrelated compliance frameworks to projects by sending crafted GraphQL mutations that bypassed framework-specific permission checks.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue has been discovered in GitLab EE affecting all versions from 16.10 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated users to assign unrelated compliance frameworks to projects by sending crafted GraphQL mutations that bypassed framework-specific permission checks.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2025-5846 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0537 certfr-2025-avi-0537 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0537 https://cve.radiocsirt.org/vuln/euvd-2026-245900 EUVD-2026-245900 https://cve.radiocsirt.org/vuln/euvd-2026-245900 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5846 <p>An issue has been discovered in GitLab EE affecting all versions from 16.10 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated users to assign unrelated compliance frameworks to projects by sending crafted GraphQL mutations that bypassed framework-specific permission checks.</p> <p>An issue has been discovered in GitLab EE affecting all versions from 16.10 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated users to assign unrelated compliance frameworks to projects by sending crafted GraphQL mutations that bypassed framework-specific permission checks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-5846 https://cve.radiocsirt.org/vuln/ghsa-4wp9-h8xr-gvf2 <p>An issue has been discovered in GitLab EE affecting all versions from 16.10 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated users to assign unrelated compliance frameworks to projects by sending crafted GraphQL mutations that bypassed framework-specific permission checks.</p> <p>An issue has been discovered in GitLab EE affecting all versions from 16.10 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated users to assign unrelated compliance frameworks to projects by sending crafted GraphQL mutations that bypassed framework-specific permission checks.</p> https://cve.radiocsirt.org/vuln/ghsa-4wp9-h8xr-gvf2 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-5846 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue has been discovered in GitLab EE affecting all versions from 16.10 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated users to assign unrelated compliance frameworks to projects by sending crafted GraphQL mutations that bypassed framework-specific permission checks.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue has been discovered in GitLab EE affecting all versions from 16.10 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated users to assign unrelated compliance frameworks to projects by sending crafted GraphQL mutations that bypassed framework-specific permission checks.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-5846 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1394 <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Sicherheitsvorkehrungen zu umgehen, seine Rechte zu erweitern oder einen Denial of Service zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Sicherheitsvorkehrungen zu umgehen, seine Rechte zu erweitern oder einen Denial of Service zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1394