Linux Distros Unpatched Vulnerability : CVE-2020-13340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log CVE-2020-13340 Note that Nessus reli...

Linux Distros Unpatched Vulnerability : CVE-2023-0989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure issue in GitLab CE/EE affecting all versions starting from 13.11 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allow...

Linux Distros Unpatched Vulnerability : CVE-2023-5106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to...

Linux Distros Unpatched Vulnerability : CVE-2022-0123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab does not validate SSL...

GitLab < 18.1.5 / 18.2 < 18.2.5 / 18.3 < 18.3.1 (CVE-2025-2246)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that could have allowed unauthenticated users to access sensitive manual...

Linux Distros Unpatched Vulnerability : CVE-2021-22252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A confusion between tag and branch names in GitLab CE/EE affecting all versions since 13.7 allowed a Developer to access protected CI variables which should onl...

Linux Distros Unpatched Vulnerability : CVE-2025-5121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A missing authorization check may have...

Linux Distros Unpatched Vulnerability : CVE-2021-22247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper authorization in GitLab CE/EE affecting all versions since 13.0 allows guests in private projects to view CI/CD analytics CVE-2021-22247 Note that Ness...

Linux Distros Unpatched Vulnerability : CVE-2021-39935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all version...

Malicious code in ci-queue (npm)

The package ci-queue was found to contain malicious code...

Malicious code in @zalastax/nolb-ci_ (npm)

The package @zalastax/nolb-ci was found to contain malicious code...

MAL-2025-17012 Malicious code in ci_calculator_2024 (npm)

The package cicalculator2024 was found to contain malicious code...

MAL-2025-17150 Malicious code in closure-es6 (npm)

The package closure-es6 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security e0574a10de5b6d2bca40b32e3869d3a497db2729667e3523f97b8dde3f5846c7 This package installs a dependency hosted on a custom domain that runs an inf...

MAL-2025-12606 Malicious code in @zalastax/nolb-node-ci (npm)

The package @zalastax/nolb-node-ci was found to contain malicious code...

MAL-2025-12653 Malicious code in @zalastax/nolb-node-red-ci (npm)

The package @zalastax/nolb-node-red-ci was found to contain malicious code...

Malicious code in @zalastax/nolb-node-red-ci (npm)

The package @zalastax/nolb-node-red-ci was found to contain malicious code...

MAL-2025-10910 Malicious code in @zalastax/nolb-ci_ (npm)

The package @zalastax/nolb-ci was found to contain malicious code...

MAL-2025-17011 Malicious code in ci-queue (npm)

The package ci-queue was found to contain malicious code...

CVE-2025-54864

CVE-2025-54864 affects Hydra (Nix-based CI) where the endpoints /api/push-github and /api/push-gitea were called without HTTP Basic authentication, despite the forges implementing HMAC with a secret key. The root cause is missing authentication on those calls, enabling heavy evaluations that can ...

Linux Distros Unpatched Vulnerability : CVE-2022-48908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: arcnet: com20020: Fix null-ptr-deref in com20020pciprobe During driver initialization, the pointer of card info, i.e. the variable 'ci' is required. Howeve...