https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:26:46 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-03436 bdu:2026-03436 https://cve.radiocsirt.org/vuln/bdu:2026-03436 https://cve.radiocsirt.org/vuln/bit-gitlab-2026-1090 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user, when the `markdown_placeholders` feature flag was enabled, to inject JavaScript in a browser due to improper sanitization of placeholder content in markdown processing.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user, when the `markdown_placeholders` feature flag was enabled, to inject JavaScript in a browser due to improper sanitization of placeholder content in markdown processing.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2026-1090 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0276 certfr-2026-avi-0276 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0276 https://cve.radiocsirt.org/vuln/euvd-2026-275697 EUVD-2026-275697 https://cve.radiocsirt.org/vuln/euvd-2026-275697 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1090 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user, when the `markdown_placeholders` feature flag was enabled, to inject JavaScript in a browser due to improper sanitization of placeholder content in markdown processing.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user, when the `markdown_placeholders` feature flag was enabled, to inject JavaScript in a browser due to improper sanitization of placeholder content in markdown processing.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-1090 https://cve.radiocsirt.org/vuln/ghsa-qv6p-pfj5-mhj9 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user, when the `markdown_placeholders` feature flag was enabled, to inject JavaScript in a browser due to improper sanitization of placeholder content in markdown processing.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user, when the `markdown_placeholders` feature flag was enabled, to inject JavaScript in a browser due to improper sanitization of placeholder content in markdown processing.</p> https://cve.radiocsirt.org/vuln/ghsa-qv6p-pfj5-mhj9 https://cve.radiocsirt.org/vuln/ncsc-2026-0093 NCSC-2026-0093 https://cve.radiocsirt.org/vuln/ncsc-2026-0093 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-1090 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user, when the `markdown_placeholders` feature flag was enabled, to inject JavaScript in a browser due to improper sanitization of placeholder content in markdown processing.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user, when the `markdown_placeholders` feature flag was enabled, to inject JavaScript in a browser due to improper sanitization of placeholder content in markdown processing.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-1090 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0697 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen offenzulegen, Cross-Site-Scripting-Angriffe zu starten oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen offenzulegen, Cross-Site-Scripting-Angriffe zu starten oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0697