io.karatelabs:karate-gatling (>=2.0.3, <=2.0.10), io.karatelabs:karate-image (2.0.10) +1 more potentially affected by unknown CVE via io.karatelabs:karate-core (>=2.0.3, <=2.0.10)

io.karatelabs:karate-core MAVEN version =2.0.3, =2.0.3, =2.0.3, =2.0.10 Source cves: unknown CVE Source advisory: SNYK:JAVA-IOKARATELABS-17732778...

io.karatelabs:karate-gatling (>=2.0.3, <=2.0.10), io.karatelabs:karate-image (2.0.10) +1 more potentially affected by unknown CVE via io.karatelabs:karate-core (>=2.0.3, <=2.0.10)

io.karatelabs:karate-core MAVEN version =2.0.3, =2.0.3, =2.0.3, =2.0.10 Source cves: unknown CVE Source advisory: OSV:GHSA-2C85-RFCC-G74J...

io.karatelabs:karate-gatling (>=2.0.3, <=2.0.10), io.karatelabs:karate-image (2.0.10) +1 more potentially affected by unknown CVE via io.karatelabs:karate-core (>=2.0.3, <=2.0.10)

io.karatelabs:karate-core MAVEN version =2.0.3, =2.0.3, =2.0.3, =2.0.10 Source cves: unknown CVE Source advisory: GHSA-2C85-RFCC-G74J...

Cross-Site Scripting (XSS)

Jenkins Gatling is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to bypass of Content-Security-Policy protections when serving Gatling reports, which allows an attacker to inject and execute malicious scripts through modified report content...

EUVD-2025-23856

Malicious code in bioql PyPI...

EUVD-2022-4216

Malicious code in bioql PyPI...

EUVD-2025-23855

Malicious code in bioql PyPI...

EUVD-2025-17299

Malicious code in bioql PyPI...

CVE-2025-51308

In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a REST API call on read-only endpoints, allowing him to collect some information, due to missing authorization checks...

CVE-2025-51306

In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to incorrect session management...

CVE-2025-51308

In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a REST API call on read-only endpoints, allowing him to collect some information, due to missing authorization checks...

CVE-2025-51306

In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to incorrect session management...

CVE-2025-51306

In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to incorrect session management...

CVE-2025-51308

In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a REST API call on read-only endpoints, allowing him to collect some information, due to missing authorization checks...

CVE-2025-51306

In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to incorrect session management...

CVE-2025-51308

Gatling Enterprise versions prior to 1.25.0 are vulnerable to a security flaw caused by missing authorization checks . This allows a low-privileged user who does not hold the admin role to perform REST API calls on read-only endpoints. Consequently, an attacker could collect unauthorized informat...

PT-2025-32181

Name of the Vulnerable Software and Affected Versions Gatling Enterprise versions prior to 1.25.0 Description Gatling Enterprise is susceptible to an issue where a user with limited privileges, lacking the “admin” role, can execute REST API calls on read-only endpoints. This allows unauthorized...

CVE-2025-51306

Gatling Enterprise versions below 1.25.0 are vulnerable to a security flaw caused by incorrect session management . This issue allows a user who has logged out to continue using their session token to access the application without expiration. To mitigate this risk, it is recommended to update Ga...

CVE-2025-51308: Missing Authorization

In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a REST API call on read-only endpoints, allowing him to collect some information, due to missing authorization checks...

CVE-2025-51308

In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a REST API call on read-only endpoints, allowing him to collect some information, due to missing authorization checks...