<?xml version="1.0" encoding="UTF-8"?>
<VrdaData refvuldefversion="1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://vrda.jpcert.or.jp" xsi:schemaLocation="http://vrda.jpcert.or.jp/feed/xsd/vrda_data.xsd">
  <VrdaDataProvider>
    <Name>JVN iPedia</Name>
    <URL>http://jvndb.jvn.jp</URL>
  </VrdaDataProvider>
  <VrdaDataSourceType>Advisory</VrdaDataSourceType>
  <Vulinfo revisionno="1" lang="en" invalidated="false">
    <VulinfoID>JVNDB-2026-002753</VulinfoID>
    <VulinfoData>
      <Title>GitLab.org&#12398;GitLab&#12395;&#12362;&#12369;&#12427;&#35469;&#35388;&#12398;&#27424;&#22914;&#12395;&#38306;&#12377;&#12427;&#33030;&#24369;&#24615;</Title>
      <VulinfoDescription>
        <Overview>GitLab CE/EE&#12398;&#12496;&#12540;&#12472;&#12519;&#12531;16.8&#12363;&#12425;18.5.0&#26410;&#28288;&#12398;&#12377;&#12409;&#12390;&#12398;&#12496;&#12540;&#12472;&#12519;&#12531;&#12395;&#24433;&#38911;&#12434;&#19982;&#12360;&#12427;&#33030;&#24369;&#24615;&#12364;&#30330;&#35211;&#12373;&#12428;&#12414;&#12375;&#12383;&#12290;&#29305;&#23450;&#12398;&#26465;&#20214;&#19979;&#12391;&#12289;&#12510;&#12540;&#12472;&#12522;&#12463;&#12456;&#12473;&#12488;&#12398;&#25215;&#35469;&#12523;&#12540;&#12523;&#12434;&#19981;&#27491;&#12395;&#32232;&#38598;&#12391;&#12365;&#12427;&#21487;&#33021;&#24615;&#12364;&#12354;&#12426;&#12414;&#12377;&#12290;</Overview>
      </VulinfoDescription>
      <Affected>
        <AffectedItem affectedstatus="vulnerable">
          <Lapt>cpe:/a:gitlab:gitlab</Lapt>
        </AffectedItem>
      </Affected>
      <FactAnalysis>
      </FactAnalysis>
      <Related>
        <RelatedItem relationtype="self" origin="jvnipedia">
          <URL>https://jvndb.jvn.jp/ja/contents/2026/JVNDB-2026-002753.html</URL>
        </RelatedItem>
        <RelatedItem relationtype="alternate" origin="other">
          <Name>Common Vulnerabilities and Exposures (CVE)</Name>
          <VulinfoID>CVE-2026-1751</VulinfoID>
          <URL>https://www.cve.org/CVERecord?id=CVE-2026-1751</URL>
        </RelatedItem>
        <RelatedItem relationtype="alternate" origin="other">
          <Name>National Vulnerability Database (NVD)</Name>
          <VulinfoID>CVE-2026-1751</VulinfoID>
          <URL>https://nvd.nist.gov/vuln/detail/CVE-2026-1751</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>GitLab</Name>
          <VulinfoID>Removed author of the merge request can still edit merge request&#8217;s approval rules using API (#519340)  Issue  gitlab-org/gitlab</VulinfoID>
          <URL>https://gitlab.com/gitlab-org/gitlab/-/issues/519340</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>JVNDB</Name>
          <VulinfoID>CWE-862</VulinfoID>
          <Title>&#35469;&#35388;&#12398;&#27424;&#22914;</Title>
          <URL>https://cwe.mitre.org/data/definitions/862.html</URL>
        </RelatedItem>
      </Related>
      <DateFirstPublished>2026-02-06T10:37:26+09:00</DateFirstPublished>
      <DateLastUpdated>2026-02-06T10:37:26+09:00</DateLastUpdated>
    </VulinfoData>
  </Vulinfo>
</VrdaData>
