{"vulnerability": "CVE-2026-8280", "sightings": [{"uuid": "9dccfdc5-6653-4715-8966-9cb301e447cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8280", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlsj4fwudh2n", "content": "CVE-2026-8280 - Allocation of Resources Without Limits or Throttling in GitLab\nCVE ID : CVE-2026-8280\n \n Published : May 14, 2026, 6:16 a.m. | 2\u00a0hours, 14\u00a0minutes ago\n \n Description : GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.9.7,...", "creation_timestamp": "2026-05-14T09:32:02.487288Z"}, {"uuid": "50076f33-29e4-451e-9a36-44491446b276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8280", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "e8dc5a66-1891-43af-9222-ce89fc834d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82804", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/avj6mrq4d5wrc", "content": "CVE-2026-82804: Apache DolphinScheduler: Command Injection in the Alert Script Plugin", "creation_timestamp": "2026-09-29T14:26:39.992688Z"}, {"uuid": "88a58657-4ec4-46c3-976f-391f39e75e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82806", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwsphy2uzs2m", "content": "CVE-2026-78242: Apache disclosed two Apache APISIX flaws. In 3.17.0, data-mask can log unmasked request headers; fixed in 3.18.0. CVE-2026-82806 can leak authorization scope across requests on authz-keycloak routes; fixed in 3.7.0.", "creation_timestamp": "2026-10-01T11:03:01.017048Z"}, {"uuid": "809b33fd-d1c8-47fc-ac86-786f13f7a1c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82806", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/csmkkeshxr62z", "content": "CVE-2026-82806: Apache APISIX: cross-request permission pollution via static permission list mutation", "creation_timestamp": "2026-10-01T12:50:53.661184Z"}]}