CVE-2025-10497: Allocation of Resources Without Limits or Throttling

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service condition by sending specially crafted payloads...

CVE-2025-2934 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 5.2 prior to 18.2.8, 18.3 prior to 18.3.4, and 18.4 prior to 18.4.2 that could have allowed an authenticated attacker to create a denial of service condition by configuring malicious webhook endpoints that send crafted HTT...

EUVD-2020-5532

Malware in sbrugna...

EUVD-2020-5537

Malware in sbrugna...

EUVD-2021-26300

Malware in sbrugna...

EUVD-2021-26227

Malware in sbrugna...

EUVD-2025-1730

Malicious code in bioql PyPI...

EUVD-2021-9377

Malicious code in bioql PyPI...

EUVD-2022-42453

Malicious code in bioql PyPI...

EUVD-2022-34788

Malicious code in bioql PyPI...

EUVD-2022-51715

Malicious code in bioql PyPI...

EUVD-2023-12974

Malicious code in bioql PyPI...

EUVD-2022-34877

Malicious code in bioql PyPI...

EUVD-2021-9369

Malicious code in bioql PyPI...

EUVD-2025-20989

Malicious code in bioql PyPI...

EUVD-2022-24454

Malicious code in bioql PyPI...

EUVD-2022-35135

Malicious code in bioql PyPI...

CVE-2025-10868

Removed by vendor...

CVE-2025-9958 Insertion of Sensitive Information Into Sent Data in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1, that could have allowed Guest users to access sensitive information stored in virtual registry configurations...

CVE-2025-9642: Improper Neutralization of Input During Web Page Generation

An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could allow an attacker to inject malicious content that may lead to account takeover...