https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:05:39 +0000 https://cve.radiocsirt.org/vuln/bit-gitlab-2026-8144 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with project membership to enumerate private group members due to missing authorization checks.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with project membership to enumerate private group members due to missing authorization checks.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2026-8144 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0593 certfr-2026-avi-0593 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0593 https://cve.radiocsirt.org/vuln/euvd-2026-318506 EUVD-2026-318506 https://cve.radiocsirt.org/vuln/euvd-2026-318506 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8144 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with project membership to enumerate private group members due to missing authorization checks.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with project membership to enumerate private group members due to missing authorization checks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-8144 https://cve.radiocsirt.org/vuln/ghsa-c73g-r4cp-2xmg <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with project membership to enumerate private group members due to missing authorization checks.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with project membership to enumerate private group members due to missing authorization checks.</p> https://cve.radiocsirt.org/vuln/ghsa-c73g-r4cp-2xmg https://cve.radiocsirt.org/vuln/ncsc-2026-0161 NCSC-2026-0161 https://cve.radiocsirt.org/vuln/ncsc-2026-0161 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-8144 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with project membership to enumerate private group members due to missing authorization checks.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with project membership to enumerate private group members due to missing authorization checks.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-8144 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1523 <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1523