https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:14:26 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-09071 bdu:2026-09071 https://cve.radiocsirt.org/vuln/bdu:2026-09071 https://cve.radiocsirt.org/vuln/bit-gitlab-2026-10086 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute arbitrary client-side code in the context of another user&#39;s session, due to improper sanitization of user-supplied input.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute arbitrary client-side code in the context of another user&#39;s session, due to improper sanitization of user-supplied input.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2026-10086 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0799 certfr-2026-avi-0799 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0799 https://cve.radiocsirt.org/vuln/euvd-2026-330443 EUVD-2026-330443 https://cve.radiocsirt.org/vuln/euvd-2026-330443 https://cve.radiocsirt.org/vuln/fkie_cve-2026-10086 <p>GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute arbitrary client-side code in the context of another user&#39;s session, due to improper sanitization of user-supplied input.</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute arbitrary client-side code in the context of another user&#39;s session, due to improper sanitization of user-supplied input.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-10086 https://cve.radiocsirt.org/vuln/ghsa-fc6w-qm7g-jfwh <p>GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute arbitrary client-side code in the context of another user&#39;s session, due to improper sanitization of user-supplied input.</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute arbitrary client-side code in the context of another user&#39;s session, due to improper sanitization of user-supplied input.</p> https://cve.radiocsirt.org/vuln/ghsa-fc6w-qm7g-jfwh https://cve.radiocsirt.org/vuln/ncsc-2026-0211 NCSC-2026-0211 https://cve.radiocsirt.org/vuln/ncsc-2026-0211 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2070 <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2070