4561 matches found
PT-2025-36624
Summary A query depth restriction using the max-depth property can be bypassed if ignoreIntrospection is enabled which is the default configuration by naming your query/fragment schema. Details At the start of the countDepth function, we have the following check for the ignoreIntrospection option...
Linux Distros Unpatched Vulnerability : CVE-2024-4006
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 before 16.9.6, all versions starting from 16.10 before 16.10.4, all...
Linux Distros Unpatched Vulnerability : CVE-2025-5846
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab EE affecting all versions from 16.10 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed...
Linux Distros Unpatched Vulnerability : CVE-2025-27407
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21,...
Linux Distros Unpatched Vulnerability : CVE-2022-0172
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was possible to bypass the IP restriction fo...
Linux Distros Unpatched Vulnerability : CVE-2021-22228
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 13.12.6, and all versions starting from 14...
Linux Distros Unpatched Vulnerability : CVE-2024-8116
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 16.9 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. By using a specific...
Malicious code in @zalastax/nolb-graphql (npm)
The package @zalastax/nolb-graphql was found to contain malicious code...
Malicious code in @zalastax/nolb-graphql- (npm)
The package @zalastax/nolb-graphql- was found to contain malicious code...
Malicious code in @zalastax/nolb-graphql-2 (npm)
The package @zalastax/nolb-graphql-2 was found to contain malicious code...
Malicious code in @zalastax/nolb-graphql-a (npm)
The package @zalastax/nolb-graphql-a was found to contain malicious code...
Malicious code in @zalastax/nolb-graphql-b (npm)
The package @zalastax/nolb-graphql-b was found to contain malicious code...
Malicious code in @zalastax/nolb-graphql-c (npm)
The package @zalastax/nolb-graphql-c was found to contain malicious code...
Malicious code in @zalastax/nolb-graphql-d (npm)
The package @zalastax/nolb-graphql-d was found to contain malicious code...
Malicious code in @zalastax/nolb-graphql-e (npm)
The package @zalastax/nolb-graphql-e was found to contain malicious code...
Malicious code in @zalastax/nolb-graphql-f (npm)
The package @zalastax/nolb-graphql-f was found to contain malicious code...
Malicious code in @zalastax/nolb-graphql-i (npm)
The package @zalastax/nolb-graphql-i was found to contain malicious code...
Malicious code in @zalastax/nolb-graphql-k (npm)
The package @zalastax/nolb-graphql-k was found to contain malicious code...