https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:02:00 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-06382 bdu:2026-06382 https://cve.radiocsirt.org/vuln/bdu:2026-06382 https://cve.radiocsirt.org/vuln/bit-gitlab-2026-3857 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated user to execute arbitrary GraphQL mutations on behalf of authenticated users due to insufficient CSRF protection.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated user to execute arbitrary GraphQL mutations on behalf of authenticated users due to insufficient CSRF protection.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2026-3857 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0357 certfr-2026-avi-0357 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0357 https://cve.radiocsirt.org/vuln/euvd-2026-277511 EUVD-2026-277511 https://cve.radiocsirt.org/vuln/euvd-2026-277511 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3857 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated user to execute arbitrary GraphQL mutations on behalf of authenticated users due to insufficient CSRF protection.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated user to execute arbitrary GraphQL mutations on behalf of authenticated users due to insufficient CSRF protection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-3857 https://cve.radiocsirt.org/vuln/ghsa-hv8g-9cgr-4hmc <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated user to execute arbitrary GraphQL mutations on behalf of authenticated users due to insufficient CSRF protection.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated user to execute arbitrary GraphQL mutations on behalf of authenticated users due to insufficient CSRF protection.</p> https://cve.radiocsirt.org/vuln/ghsa-hv8g-9cgr-4hmc https://cve.radiocsirt.org/vuln/ncsc-2026-0103 NCSC-2026-0103 https://cve.radiocsirt.org/vuln/ncsc-2026-0103 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0847 <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Dateien zu manipulieren, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Dateien zu manipulieren, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0847