Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 09:08:51 +0000 certfr-2026-avi-1294 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… https://db.gcve.eu/vuln/certfr-2026-avi-1294 certfr-2026-avi-1294 https://db.gcve.eu/vuln/certfr-2026-avi-1294 fkie_cve-2026-92883 https://db.gcve.eu/vuln/fkie_cve-2026-92883 <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users&#39; browser sessions via a specially crafted repository, due to improper sanitization of HTML attributes in syntax-highlighted output.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users&#39; browser sessions via a specially crafted repository, due to improper sanitization of HTML attributes in syntax-highlighted output.</p> https://db.gcve.eu/vuln/fkie_cve-2026-92883 GHSA-ggg2-vpmq-m78f https://db.gcve.eu/vuln/ghsa-ggg2-vpmq-m78f <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users&#39; browser sessions via a specially crafted repository, due to improper sanitization of HTML attributes in syntax-highlighted output.</p> <p>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users&#39; browser sessions via a specially crafted repository, due to improper sanitization of HTML attributes in syntax-highlighted output.</p> https://db.gcve.eu/vuln/ghsa-ggg2-vpmq-m78f NCSC-2026-0414 — Kwetsbaarheden verholpen in GitLab https://db.gcve.eu/vuln/ncsc-2026-0414 NCSC-2026-0414 https://db.gcve.eu/vuln/ncsc-2026-0414