https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 21:05:13 +0000 https://cve.radiocsirt.org/vuln/bit-gitlab-2021-39904 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows a Merge Request creator to resolve discussions and apply suggestions after a project owner has locked the Merge Request</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows a Merge Request creator to resolve discussions and apply suggestions after a project owner has locked the Merge Request</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2021-39904 https://cve.radiocsirt.org/vuln/certfr-2021-avi-830 certfr-2021-avi-830 https://cve.radiocsirt.org/vuln/certfr-2021-avi-830 https://cve.radiocsirt.org/vuln/cnvd-2021-91183 cnvd-2021-91183 https://cve.radiocsirt.org/vuln/cnvd-2021-91183 https://cve.radiocsirt.org/vuln/euvd-2026-30913 EUVD-2026-30913 https://cve.radiocsirt.org/vuln/euvd-2026-30913 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39904 <p>An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows a Merge Request creator to resolve discussions and apply suggestions after a project owner has locked the Merge Request</p> <p>An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows a Merge Request creator to resolve discussions and apply suggestions after a project owner has locked the Merge Request</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-39904 https://cve.radiocsirt.org/vuln/ghsa-2mm8-x5g7-wf73 <p>An Improper Access Control vulnerability in the GraphQL API in GitLab CE/EE since version 13.1 allows a Merge Request creator to resolve discussions and apply suggestions after a project owner has locked the Merge Request</p> <p>An Improper Access Control vulnerability in the GraphQL API in GitLab CE/EE since version 13.1 allows a Merge Request creator to resolve discussions and apply suggestions after a project owner has locked the Merge Request</p> https://cve.radiocsirt.org/vuln/ghsa-2mm8-x5g7-wf73 https://cve.radiocsirt.org/vuln/gsd-2021-39904 gsd-2021-39904 https://cve.radiocsirt.org/vuln/gsd-2021-39904 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-39904 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows a Merge Request creator to resolve discussions and apply suggestions after a project owner has locked the Merge Request</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows a Merge Request creator to resolve discussions and apply suggestions after a project owner has locked the Merge Request</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-39904