https://vulnerability.circl.lu/sightings/feed 2026-10-20T07:46:43.062644+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/cb532291-54a6-481b-b7f4-1a32a238e70f/export 2026-10-20T07:46:43.087257+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cb532291-54a6-481b-b7f4-1a32a238e70f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7767", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117431156287892048", "content": "CVE-2026-7767 URL Redirection to Untrusted Site ('Open Redirect') in GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to an unintended server due to improper redirect validation in the Kubernetes proxy.\nhttps://www.cve.org/CVERecord?id=CVE-2026-7767https://gitlab.com/gitlab-org/gitlab/-/work_items/598965https://hackerone.com/reports/3597095https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/#gitlab #GitLab#CVE_2026_7767#bot", "creation_timestamp": "2026-10-13T02:07:23.656129Z"} 2026-10-13T02:07:23.656129+00:00 https://vulnerability.circl.lu/sighting/ada58678-09b4-4199-b1a9-44948c07b5ae/export 2026-10-20T07:46:43.088895+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "ada58678-09b4-4199-b1a9-44948c07b5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7767", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20261013", "content": "", "creation_timestamp": "2026-10-12T18:00:00.000000Z"} 2026-10-12T18:00:00+00:00