https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:38:16 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-01825 bdu:2026-01825 https://cve.radiocsirt.org/vuln/bdu:2026-01825 https://cve.radiocsirt.org/vuln/bit-gitlab-2025-7659 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to steal tokens and access private repositories by abusing incomplete validation in the Web IDE.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to steal tokens and access private repositories by abusing incomplete validation in the Web IDE.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2025-7659 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0146 certfr-2026-avi-0146 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0146 https://cve.radiocsirt.org/vuln/euvd-2026-270915 EUVD-2026-270915 https://cve.radiocsirt.org/vuln/euvd-2026-270915 https://cve.radiocsirt.org/vuln/fkie_cve-2025-7659 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to steal tokens and access private repositories by abusing incomplete validation in the Web IDE.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to steal tokens and access private repositories by abusing incomplete validation in the Web IDE.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-7659 https://cve.radiocsirt.org/vuln/ghsa-7p7x-r7pv-gq7p <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to steal tokens and access private repositories by abusing incomplete validation in the Web IDE.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to steal tokens and access private repositories by abusing incomplete validation in the Web IDE.</p> https://cve.radiocsirt.org/vuln/ghsa-7p7x-r7pv-gq7p https://cve.radiocsirt.org/vuln/ncsc-2026-0062 NCSC-2026-0062 https://cve.radiocsirt.org/vuln/ncsc-2026-0062 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-7659 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to steal tokens and access private repositories by abusing incomplete validation in the Web IDE.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to steal tokens and access private repositories by abusing incomplete validation in the Web IDE.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-7659 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0380 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial-of-Service-Angriff durchzuführen, Cross-Site-Scripting-Angriffe zu starten, auf nicht autorisierte Daten zuzugreifen oder diese zu ändern oder Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial-of-Service-Angriff durchzuführen, Cross-Site-Scripting-Angriffe zu starten, auf nicht autorisierte Daten zuzugreifen oder diese zu ändern oder Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0380