CVE-2026-13113: Time-of-check Time-of-use (TOCTOU) Race Condition

GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to merge code into a protected branch without the required approvals due to a race conditio...

PT-2017-14602

Name of the Vulnerable Software and Affected Versions Bitbucket auto-unapprove plugin affected versions not specified Description The issue allows an attacker to bypass the auto-unapprove plugin in Bitbucket via minimal brute-force, exploiting the asynchronous events on the back-end. This enables...