{"schema":"vulnpedia.research/1","cve":"CVE-2026-10053","references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/601596","tags":["Broken Link"],"source":"mitre","sourceId":"GitLab","modified":"2026-08-23T09:27:01.138Z","origins":[{"source":"mitre","sourceId":"GitLab","modified":"2026-08-23T09:27:01.138Z","url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/601596"},{"source":"nvd","sourceId":"CVE-2026-10053","modified":"2026-10-14T13:10:00.187","url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/601596"}]},{"url":"https://hackerone.com/reports/3754194","tags":["technical-description","exploit","permissions-required","Permissions Required","Third Party Advisory"],"source":"mitre","sourceId":"GitLab","modified":"2026-08-23T09:27:01.138Z","origins":[{"source":"mitre","sourceId":"GitLab","modified":"2026-08-23T09:27:01.138Z","url":"https://hackerone.com/reports/3754194"},{"source":"nvd","sourceId":"CVE-2026-10053","modified":"2026-10-14T13:10:00.187","url":"https://hackerone.com/reports/3754194"}]},{"source":"euvd","sourceId":"EUVD-2026-64645","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-64645","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-64645","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-64645"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/dinosn/CVE-2026-10053-lab","source":"poc-in-github","sourceId":"CVE-2026-10053","description":"Reproducible lab for CVE-2026-10053 (GitLab npm package-registry path traversal -> arbitrary file write as git). Vulnerable 19.2.1 vs patched 19.2.2, deterministic oracle.","modified":"2026-08-24T02:20:19Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-10053","url":"https://github.com/dinosn/CVE-2026-10053-lab"},{"source":"poc-in-github","sourceId":"CVE-2026-10053","modified":"2026-08-24T02:20:19Z","url":"https://github.com/dinosn/CVE-2026-10053-lab"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[]}