https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:52:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-05152 bdu:2026-05152 https://cve.radiocsirt.org/vuln/bdu:2026-05152 https://cve.radiocsirt.org/vuln/bit-gitlab-2026-4332 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users&#39; browsers due to improper input sanitization.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users&#39; browsers due to improper input sanitization.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2026-4332 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0410 certfr-2026-avi-0410 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0410 https://cve.radiocsirt.org/vuln/euvd-2026-290163 EUVD-2026-290163 https://cve.radiocsirt.org/vuln/euvd-2026-290163 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4332 <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users&#39; browsers due to improper input sanitization.</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users&#39; browsers due to improper input sanitization.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-4332 https://cve.radiocsirt.org/vuln/ghsa-26q6-hm4f-j23h <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users&#39; browsers due to improper input sanitization.</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users&#39; browsers due to improper input sanitization.</p> https://cve.radiocsirt.org/vuln/ghsa-26q6-hm4f-j23h https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4332 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users&#39; browsers due to improper input sanitization.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users&#39; browsers due to improper input sanitization.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4332 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1010 <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1010