https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 21:51:06 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1363 certfr-2026-avi-1363 https://db.gcve.eu/vuln/certfr-2026-avi-1363 https://db.gcve.eu/vuln/fkie_cve-2026-105711 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a confidential issue from a private project, an authenticated user with no project membership could have read the confidential issue&#39;s title, due to a viewer-independent fragment cache key that incorrectly shared per-user-redacted rendered content across all users.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a confidential issue from a private project, an authenticated user with no project membership could have read the confidential issue&#39;s title, due to a viewer-independent fragment cache key that incorrectly shared per-user-redacted rendered content across all users.</p> https://db.gcve.eu/vuln/fkie_cve-2026-105711 https://db.gcve.eu/vuln/ghsa-5jh8-pw64-jw5v <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a confidential issue from a private project, an authenticated user with no project membership could have read the confidential issue&#39;s title, due to a viewer-independent fragment cache key that incorrectly shared per-user-redacted rendered content across all users.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a confidential issue from a private project, an authenticated user with no project membership could have read the confidential issue&#39;s title, due to a viewer-independent fragment cache key that incorrectly shared per-user-redacted rendered content across all users.</p> https://db.gcve.eu/vuln/ghsa-5jh8-pw64-jw5v https://db.gcve.eu/vuln/ncsc-2026-0447 NCSC-2026-0447 https://db.gcve.eu/vuln/ncsc-2026-0447