EUVD-2023-44052

Malicious code in bioql PyPI...

EUVD-2022-43238

Malicious code in bioql PyPI...

EUVD-2022-34385

Malicious code in bioql PyPI...

EUVD-2022-15304

Malicious code in bioql PyPI...

EUVD-2023-58443

Malicious code in bioql PyPI...

EUVD-2024-48333

Malicious code in bioql PyPI...

EUVD-2022-25231

Malicious code in bioql PyPI...

EUVD-2025-16135

Malicious code in bioql PyPI...

EUVD-2025-16134

Malicious code in bioql PyPI...

EUVD-2024-50814

Malicious code in bioql PyPI...

EUVD-2023-57555

Malicious code in bioql PyPI...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to improper assignment of ownership rights, allows a violator to gain unauthorized access to confidential information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to improper assignment of ownership rights. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to confidential information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the disclosure of information during data transmission, allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect handling of logical operations, allows a hacker to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the improper handling of logical operations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

GitLab 11.10 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-8014)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

CVE-2025-9642 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could allow an attacker to inject malicious content that may lead to account takeover...

CVE-2025-10858

GitLab CE/EE vulnerable to unauthenticated DoS when uploading specially crafted large JSON files. Affected branches: all versions before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1. Impact is Denial of Service (availability impact). CVSS 3.1 base score 7.5 (HIGH) with network attack vector...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE and EE versions prior to 18.2.7,...

GitLab 14.10 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-9958)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1, that could have allowed Guest users to access sensitive...

GitLab 17.2 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-11042)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Allocation of Resources Without Limits or Throttling in GitLab CVE-2025-11042 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...