https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:53:25 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-15872 bdu:2025-15872 https://cve.radiocsirt.org/vuln/bdu:2025-15872 https://cve.radiocsirt.org/vuln/bit-gitlab-2025-8405 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability code flow displays.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability code flow displays.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2025-8405 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1095 certfr-2025-avi-1095 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1095 https://cve.radiocsirt.org/vuln/euvd-2026-271277 EUVD-2026-271277 https://cve.radiocsirt.org/vuln/euvd-2026-271277 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8405 <p>GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability code flow displays.</p> <p>GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability code flow displays.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-8405 https://cve.radiocsirt.org/vuln/ghsa-fjj2-x466-w3hx <p>GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability code flow displays.</p> <p>GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability code flow displays.</p> https://cve.radiocsirt.org/vuln/ghsa-fjj2-x466-w3hx https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-8405 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability code flow displays.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability code flow displays.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-8405 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2822 <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2822