{"vulnerability": "CVE-2026-100104", "sightings": [{"uuid": "9badd528-bcbf-4016-b4cc-91c892b0ea1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100104", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117431015647276225", "content": "CVE-2026-100104 Server-Side Request Forgery (SSRF) in GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery and reach internal network resources due to a time-of-check to time-of-use race condition in URL validation during repository import operations.\nhttps://www.cve.org/CVERecord?id=CVE-2026-100104https://gitlab.com/gitlab-org/gitlab/-/work_items/594194https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/#gitlab #GitLab#CVE_2026_100104#bot", "creation_timestamp": "2026-10-13T01:31:37.670296Z"}, {"uuid": "dba26f25-b60e-4a9d-9819-f697e3f4d5ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100104", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20261013", "content": "", "creation_timestamp": "2026-10-12T18:00:00.000000Z"}]}