EUVD-2022-24454

Malicious code in bioql PyPI...

EUVD-2021-9369

Malicious code in bioql PyPI...

EUVD-2022-51715

Malicious code in bioql PyPI...

EUVD-2022-42453

Malicious code in bioql PyPI...

EUVD-2022-34788

Malicious code in bioql PyPI...

EUVD-2025-20989

Malicious code in bioql PyPI...

EUVD-2023-12974

Malicious code in bioql PyPI...

EUVD-2022-34877

Malicious code in bioql PyPI...

EUVD-2021-9377

Malicious code in bioql PyPI...

EUVD-2022-35135

Malicious code in bioql PyPI...

EUVD-2025-1730

Malicious code in bioql PyPI...

CVE-2025-10868

Removed by vendor...

CVE-2025-9958 Insertion of Sensitive Information Into Sent Data in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1, that could have allowed Guest users to access sensitive information stored in virtual registry configurations...

CVE-2025-11042: Allocation of Resources Without Limits or Throttling

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1, that allows an attacker to cause uncontrolled CPU consumption, potentially leading to a Denial of Service DoS condition while using specific GraphQL queries...

CVE-2025-9642: Improper Neutralization of Input During Web Page Generation

An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could allow an attacker to inject malicious content that may lead to account takeover...

CVE-2025-9958: Insertion of Sensitive Information Into Sent Data

An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1, that could have allowed Guest users to access sensitive information stored in virtual registry configurations...

CVE-2025-10867: Allocation of Resources Without Limits or Throttling

An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated user to create a denial-of-service condition by exploiting an unprotected GraphQL API through repeated requests...

CVE-2025-5069: Incorrect Ownership Assignment

An issue has been discovered in GitLab CE/EE affecting all versions from 17.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated user to gain unauthorized access to confidential issues by creating a project with an identical name to the victim's...

CVE-2025-10868: Undefined Security Weakness

An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 where certain string conversion methods exhibit performance degradation with large inputs...

CVE-2025-10858: Allocation of Resources Without Limits or Throttling

An issue was discovered in GitLab CE/EE affecting all versions before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that allows unauthenticated users to cause a Denial of Service DoS condition while uploading specifically crafted large JSON files...