CVE-2025-11971

GitLab has remediated an issue in GitLab EE affecting all versions from 10.6 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to trigger unauthorized pipeline executions by manipulating commits...

CVE-2025-11971 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 10.6 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to trigger unauthorized pipeline executions by manipulating commits...

CVE-2025-11971

GitLab EE fixed CVE-2025-11971, which allowed an authenticated attacker to trigger unauthorized pipeline executions by manipulating commits. Affected versions were 10.6 to before 18.3.5, 18.3.x before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1; remediation was released as patch updates (n...

EUVD-2008-1297

Malware in sbrugna...

EUVD-2021-0413

Malware in sbrugna...

EUVD-2021-26400

Malware in sbrugna...

EUVD-2020-17717

Malware in sbrugna...

EUVD-2020-0455

Malware in sbrugna...

EUVD-2019-2131

Malware in sbrugna...

EUVD-2023-54072

Malicious code in bioql PyPI...

EUVD-2023-33706

Malicious code in bioql PyPI...

EUVD-2025-13882

Malicious code in bioql PyPI...

EUVD-2024-16029

Malicious code in bioql PyPI...

EUVD-2023-33557

Malicious code in bioql PyPI...

EUVD-2024-3224

Malicious code in bioql PyPI...

EUVD-2025-23202

Malicious code in bioql PyPI...

EUVD-2025-23193

Malicious code in bioql PyPI...

EUVD-2022-4969

Malicious code in bioql PyPI...

EUVD-2024-31717

Malicious code in bioql PyPI...

CVE-2025-59537 argo-cd is vulnerable to unauthenticated DoS attack via malformed Gogs webhook payload

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate client...