71 matches found
PT-2026-84787
Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators...
CVE-2026-84664: Modification of Assumed-Immutable Data (MAID)
Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators...
CVE-2026-61462
mcp-gitlab contains a path traversal vulnerability in the jobid parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted jobid values like ../../../user to escape the intended path prefix and access arbitrary GitLab API...
CVE-2026-61462: External Control of File Name or Path
mcp-gitlab contains a path traversal vulnerability in the jobid parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted jobid values like ../../../user to escape the intended path prefix and access arbitrary GitLab API...
CVE-2026-7250
GitLab CVE-2026-7250 affects GitLab CE/EE: versions 12.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 could, under certain conditions, allow an unauthenticated user to cause a denial of service due to improper input validation in the API request parsing middleware. Root cause is ...
CVE-2023-31485
GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-the-middle attacks...
CVE-2021-22224
A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call mutations as the victim...
CVE-2025-10282
BBOT's gitlab module could be abused to disclose a GitLab API key to an attacker controlled server with a malicious formatted git URL...
CVE-2025-10282
BBOT's gitlab module could be abused to disclose a GitLab API key to an attacker controlled server with a malicious formatted git URL...
CVE-2025-10282: Exposure of Sensitive Information to an Unauthorized Actor
BBOT's gitlab module could be abused to disclose a GitLab API key to an attacker controlled server with a malicious formatted git URL...
BBOT security vulnerabilities
BBOT is a recursive Internet scanner open-sourced by Black Lantern Security. BBOT suffers from a security vulnerability that stems from a maliciously formatted git URL that could lead to the disclosure of GitLab API keys to an attacker-controlled server...
EUVD-2021-26244
Malware in sbrugna...
EUVD-2020-5584
Malware in sbrugna...
EUVD-2020-5611
Malware in sbrugna...
EUVD-2021-26271
Malware in sbrugna...
EUVD-2014-8377
Malware in sbrugna...
EUVD-2019-6551
Malware in sbrugna...
EUVD-2022-42715
Malicious code in bioql PyPI...