CVE-2026-76820 OpenCTI: Synchronizer SSRF: stream fetch has no URL validation

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny lis...

CVE-2026-76821 OpenCTI: User-Controlled ReDoS in JSON Ingestion Mapper

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0, the JSON ingestion mapper's extractWithRegexp formula function compiled a user-supplied regular expression with the JavaScript RegExp engine in...

EUVD-2026-79240

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0, the JSON ingestion mapper's extractWithRegexp formula function compiled a user-supplied regular expression with the JavaScript RegExp engine in...

CVE-2026-76821

OpenCTI , an open-source cyber threat intelligence platform, is vulnerable to user-controlled ReDoS in the JSON ingestion mapper's extractWithRegexp formula function (prior to 7.260706.0 ). The function compiled a user-supplied regular expression with the JavaScript RegExp engine without validati...

ROOT-APP-PYPI-CVE-2026-35526 CVE-2026-35526 in strawberry-graphql - Patched by Root

Root has patched CVE-2026-35526 in the strawberry-graphql package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-35523 CVE-2026-35523 in strawberry-graphql - Patched by Root

Root has patched CVE-2026-35523 in the strawberry-graphql package for Root:PyPI. Multiple fixed versions available...

CVE-2026-19478-PoC

CVE-2026-19478 PoC Unauthenticated remote code-injection in GitLab's GraphQL layer that lets an attacker modify or delete public projects and user data with a single crafted query. No authentication, no user interaction, no special privileges...

CVE-2026-5432-GraphQL-Batching-Alias-Confusion-SQL-Injection

7. CVE-2026-5432 – Inyección SQL por Confusión de Alias y Batching en GraphQL Resumen Un resolver de GraphQL construye consultas SQL dinámicamente a partir de los alias de campo. Mediante el uso de batching y alias, un atacante omite una lista de permitidos e inyecta SQL. Gravedad: Crítica Toma d...

gitlab-cve-2026-19478-lab

CVE-2026-19478 — Invocación arbitraria de métodos sin autenticación mediante @glintroduced de GitLab GraphQL laboratorio de validación + PoC Laboratorio A/B reproducible y PoC seguro para CVE-2026-19478 GitLab CE/EE, CVSS 9.4, Crítico. Un atacante no autenticado puede invocar métodos Ruby...

CVE-2021-4191-EXPLOIT

CVE-2021-4191 - Enumeración de usuarios de GitLab GitLab es una herramienta de ciclo de vida DevOps basada en web y ampliamente utilizada que ofrece un administrador de repositorios Git con funciones integradas para integración continua, seguimiento de problemas, revisiones de código y más. La AP...

Gitlab-CVE-2026-19478

CVE-2026-19478 — Inyección de directiva @glintroduced en GraphQL de GitLab Inyección remota de código sin autenticación mediante directiva GraphQL en GitLab CE/EE — Eliminar cualquier proyecto público con una sola petición HTTP Un laboratorio práctico de pruebas de penetración que reproduce...

CVE-2026-24136-Lab

CVE-2026-24136 - Saleor GraphQL IDOR / 未授权PII窃取 概述 字段| 详情 ---|--- CVE ID| CVE-2026-24136 漏洞类型| IDOR - 通过用户控制密钥绕过授权 CWE-639 软件| Saleor 电子商务平台 受影响版本| 3.2.0 - 3.20.109 · 3.21.0 - 3.21.44 · 3.22.0 - 3.22.28 已修补版本| 3.20.110 · 3.21.45 · 3.22.29 CVSS 3.1| 7.5 高 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS...

cve-2026-19478

CVE-2026-19478 — Vulnerabilidades del filtro de versiones @glintroduced de GitLab GraphQL Un laboratorio de reproducción para dos errores relacionados en la funcionalidad de filtro de versiones de GraphQL de GitLab la directiva @glintroduced. Ambos residen en la misma área funcional, se corrigen...

CVE-2021-4191_Exploits

CVE-2021-4191漏洞利用 pip install python-graphql-client 用法： python3 gitlabenum.py --rurl http://10.0.0.6/api/graphql 版权：https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/...

CVE-2025-27407

CVE-2025-27407 GitLab Podman Lab Laboratorio mínimo solo local para demostrar que la ruta HTTP de Direct Transfer de GitLab alcanza el cargador de esquemas de introspección vulnerable de graphql-ruby. El laboratorio ejecuta un contenedor GitLab CE vulnerable; el script del PoC inicia su servidor...

CVE-2026-87719

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could allow an authenticated user with Duo Chat access to obtain Advanced Search instance configurations and sensitive credentials...

EUVD-2026-76778

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could allow an authenticated user with Duo Chat access to obtain Advanced Search instance configurations and sensitive credentials...

CVE-2026-87719

GitLab Enterprise Edition (EE) is affected by an insecure deserialization flaw in the GraphQL subscription serializer . An authenticated user with Duo Chat access can craft a specially crafted GraphQL subscription argument to bypass serialization and perform server object lookup, exposing Advance...

CVE-2026-87719 Deserialization of Untrusted Data in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could allow an authenticated user with Duo Chat access to obtain Advanced Search instance configurations and sensitive credentials...

CVE-2026-49464

NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. The nl.nl-portal:taak package from version 1.5.0 through 3.0.0 fails to verify ownership when processing the submitTaakV2 GraphQL...