Boletines de Vulnerabilidades |
CVE-2026-88880 |
|
| Software afectado | GITLAB |
| Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing malicious servers to redirect credential-bearing requests. Attackers controlling a compromised GitLab server can specify a Link header pointing to attacker-controlled infrastructure to exfiltrate authentication credentials. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-88880 | |