EUVD-2022-15304

Malicious code in bioql PyPI...

EUVD-2022-34840

Malicious code in bioql PyPI...

EUVD-2024-49083

Malicious code in bioql PyPI...

EUVD-2024-17463

Malicious code in bioql PyPI...

EUVD-2022-24528

Malicious code in bioql PyPI...

EUVD-2023-59151

Malicious code in bioql PyPI...

EUVD-2022-15504

Malicious code in bioql PyPI...

EUVD-2025-8412

Malicious code in bioql PyPI...

EUVD-2025-2082

Malicious code in bioql PyPI...

EUVD-2024-27385

Malicious code in bioql PyPI...

EUVD-2022-42788

Malicious code in bioql PyPI...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to improper assignment of ownership rights, allows a violator to gain unauthorized access to confidential information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to improper assignment of ownership rights. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to confidential information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the disclosure of information during data transmission, allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect handling of logical operations, allows a hacker to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the improper handling of logical operations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

GitLab 11.10 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-8014)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

CVE-2025-9642 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could allow an attacker to inject malicious content that may lead to account takeover...

CVE-2025-10858

GitLab CE/EE vulnerable to unauthenticated DoS when uploading specially crafted large JSON files. Affected branches: all versions before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1. Impact is Denial of Service (availability impact). CVSS 3.1 base score 7.5 (HIGH) with network attack vector...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE and EE versions prior to 18.2.7,...

GitLab 17.2 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-11042)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Allocation of Resources Without Limits or Throttling in GitLab CVE-2025-11042 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

GitLab 14.10 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-9642)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in GitLab CVE-2025-9642 Note that Nessus has not tested for this issue but has instead relied only on the application...