https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:31:36 +0000 https://cve.radiocsirt.org/vuln/bit-gitlab-2026-1456 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denial of service through CPU exhaustion by submitting specially crafted markdown files that trigger exponential processing in markdown preview.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denial of service through CPU exhaustion by submitting specially crafted markdown files that trigger exponential processing in markdown preview.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2026-1456 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0146 certfr-2026-avi-0146 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0146 https://cve.radiocsirt.org/vuln/euvd-2026-268062 EUVD-2026-268062 https://cve.radiocsirt.org/vuln/euvd-2026-268062 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1456 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denial of service through CPU exhaustion by submitting specially crafted markdown files that trigger exponential processing in markdown preview.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denial of service through CPU exhaustion by submitting specially crafted markdown files that trigger exponential processing in markdown preview.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-1456 https://cve.radiocsirt.org/vuln/ghsa-w487-9r9p-6p96 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denial of service through CPU exhaustion by submitting specially crafted markdown files that trigger exponential processing in markdown preview.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denial of service through CPU exhaustion by submitting specially crafted markdown files that trigger exponential processing in markdown preview.</p> https://cve.radiocsirt.org/vuln/ghsa-w487-9r9p-6p96 https://cve.radiocsirt.org/vuln/ncsc-2026-0062 NCSC-2026-0062 https://cve.radiocsirt.org/vuln/ncsc-2026-0062 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-1456 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab, Ubuntu:24.04:LTS: gitlab-agent, Ubuntu:25.10: gitlab-agent, Ubuntu:26.04:LTS: gitlab-agent</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denial of service through CPU exhaustion by submitting specially crafted markdown files that trigger exponential processing in markdown preview.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab, Ubuntu:24.04:LTS: gitlab-agent, Ubuntu:25.10: gitlab-agent, Ubuntu:26.04:LTS: gitlab-agent</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denial of service through CPU exhaustion by submitting specially crafted markdown files that trigger exponential processing in markdown preview.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-1456 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0380 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial-of-Service-Angriff durchzuführen, Cross-Site-Scripting-Angriffe zu starten, auf nicht autorisierte Daten zuzugreifen oder diese zu ändern oder Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial-of-Service-Angriff durchzuführen, Cross-Site-Scripting-Angriffe zu starten, auf nicht autorisierte Daten zuzugreifen oder diese zu ändern oder Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0380