58968 matches found
CVE-2026-1322
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with a readapi scoped OAuth application to create issues and add comments to issues in private projects due t...
CVE-2026-1322
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with a readapi scoped OAuth application to create issues and add comments to issues in private projects due t...
UBUNTU-CVE-2026-1322
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with a readapi scoped OAuth application to create issues and add comments to issues in private projects due t...
CVE-2026-1322 Business Logic Errors in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with a readapi scoped OAuth application to create issues and add comments to issues in private projects due t...
EUVD-2026-30220
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with a readapi scoped OAuth application to create issues and add comments to issues in private projects due t...
CVE-2026-1322
GitLab CVE-2026-1322 affects GitLab CE/EE; authenticated users with a read_api scoped OAuth app could create issues and add comments in private projects due to improper authorization. Affected versions: 16.0–<18.9.7, 18.10–<18.10.6, 18.11–
CVE-2026-1322 Business Logic Errors in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with a readapi scoped OAuth application to create issues and add comments to issues in private projects due t...
CVE-2026-8500
creationtimestamp| type| source ---|---|--- 2026-05-14 02:36:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrrunabrp2h...
CVE-2026-29205
creationtimestamp| type| source ---|---|--- 2026-05-14 02:35:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mlrru23mbc2w 2026-05-14 10:42:50+00:00| seen| https://bsky.app/profile/infosecbot.bsky.social/post/3mlsn2zl2ax2o 2026-05-19 07:29:55+00:00| seen|...
CVE-2026-44194
creationtimestamp| type| source ---|---|--- 2026-05-14 01:31:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlroahvcxq2q 2026-05-14 04:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlryba3tgh2v 2026-05-14 04:30:48+00:00| seen|...
CVE-2026-45228
creationtimestamp| type| source ---|---|--- 2026-05-14 01:10:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrn4aysf72e...
CVE-2026-45053
creationtimestamp| type| source ---|---|--- 2026-05-14 01:00:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrmkdeov42p...
PT-2026-40894
Name of the Vulnerable Software and Affected Versions User Registration & Membership plugin for WordPress versions prior to 5.1.6 Description An issue exists where the is admin creation process function relies exclusively on the presence of the action=createuser parameter within the $ REQUEST...
Unity Linux 20.1070a Security Update: git (UTSA-2026-021384)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021384 advisory. Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files...
PT-2026-41186
Name of the Vulnerable Software and Affected Versions CodeWhale versions prior to 0.8.26 Description The task create tool spawns durable sub-agents that inherit insecure default settings. Specifically, the allow shell variable defaults to true and the auto approve variable defaults to true. When ...
CVE-2026-45055
creationtimestamp| type| source ---|---|--- 2026-05-13 23:50:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrinfohog2k...
CVE-2026-44471
gitoxide is an implementation of git written in Rust. Prior to 0.21.1, a malicious tree can be constructed that will, when checked out with gitoxide, permit writing an attacker-controlled symlink into any existing directory the user has write access to. During checkout, all symlink index entries...
EUVD-2026-30137
Editors could delete any annotation, even those they do not have read access to. The editor user cannot create or read the annotations...