{"uuid": "5bfc22f7-fd8d-4356-afca-94f9f44989c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84739", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwnkcmdj752y", "content": "CVE-2026-84739: GitLab patched a cross-site scripting flaw in the merge request diff viewer of GitLab CE/EE that let an authenticated user run JavaScript in another user's session. Fixed in 19.2.7, 19.3.3 and 19.4.1. No exploitation confirmed.", "creation_timestamp": "2026-09-29T09:47:13.622179Z"}