<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>VulnFeed.org: GitLab Community Edition and Enterprise Edition</title><link>https://vulnfeed.org/</link><description>Every disclosure, as it lands. Critical-only feed available.</description><language>en</language><atom:link href="https://vulnfeed.org/feed/product/gitlab-community-edition-and-enterprise-edition.xml" rel="self" type="application/rss+xml"/><item><title>CVE-2026-97229: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-97229/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-97229/</guid><pubDate>Thu, 29 Oct 2026 00:00:00 +0000</pubDate><description>GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.</description></item><item><title>CVE-2026-85706: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-85706/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-85706/</guid><pubDate>Sat, 12 Sep 2026 02:46:31 +0000</pubDate><description>GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.</description></item></channel></rss>
