Malicious code in gitlab-accountid (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48685 Malicious code in gitlab-accountid (npm)

The package communicates with a domain associated with malicious activity...

PT-2025-43139

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 11.7 through 18.3.5 GitLab CE/EE versions 18.4 through 18.4.3 GitLab CE/EE versions 18.5 through 18.5.1 Description An unauthenticated attacker could create a denial of service condition by uploading large files to specif...

PT-2025-43140

Name of the Vulnerable Software and Affected Versions GitLab EE versions 17.6.0 through 18.3.5 GitLab EE versions 18.4.0 through 18.4.2 GitLab EE versions 18.5.0 through 18.5.0 Description An authenticated attacker could execute unauthorized quick actions by including malicious commands in specif...

PT-2025-43138

Name of the Vulnerable Software and Affected Versions GitLab EE versions prior to 18.3.5 GitLab EE versions 18.4 before 18.4.3 GitLab EE versions 18.5 before 18.5.1 Description An authenticated attacker could trigger unauthorized pipeline executions by manipulating commits. The issue relates to...

PT-2025-43136

Name of the Vulnerable Software and Affected Versions GitLab versions 3.8 through 8.5 Description Multiple vulnerabilities exist in GitLab, including improper access control, denial of service, and incorrect authorization. These issues impact the runner API. A search on Netlas.io using the provid...

PT-2025-48846

Уязвимость прикладного программного интерфейса программной платформы на базе git для совместной работы над кодом GitLab связана с недостатками механизма авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнять несанкционированные операции...

PT-2025-48844

Уязвимость прикладного программного интерфейса программной платформы на базе git для совместной работы над кодом GitLab связана с отсутствием процедуры авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

PT-2025-48845

Уязвимость прикладного программного интерфейса программной платформы на базе git для совместной работы над кодом GitLab связана с некорректной обработкой логических операций. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к проекту...

PT-2025-43143

Name of the Vulnerable Software and Affected Versions GitLab EE versions 18.4 through 18.4.2 GitLab EE versions 18.5 through 18.5.0 Description GitLab EE is affected by a business logic error in the access request approval workflow. This issue could allow authenticated users to gain unauthorized...

PT-2025-43135

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 11.0 through 18.3.4 GitLab CE/EE versions 18.4 through 18.4.2 GitLab CE/EE versions 18.5 through 18.5.0 Description An issue has been resolved in GitLab CE/EE that could allow an unauthenticated attacker to cause a denial...

PT-2025-43134

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.10 through 18.3.4 GitLab CE/EE versions 18.4 through 18.4.2 GitLab CE/EE versions 18.5 through 18.5.0 Description An issue in GitLab CE/EE could allow an unauthenticated attacker to cause a denial of service condition ...

Linux Distros Unpatched Vulnerability : CVE-2025-10004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.12 to 18.2.8, 18.3 to 18.3.4, and 18.4 to 18.4.2 that could make the GitLab instan...

GitLab Authentication Bypass Info Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the absence of authentication procedures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

GitLab SSRF

The vulnerability of the Git-based software platform for collaborative code development on GitLab CE/EE is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

Linux Distros Unpatched Vulnerability : CVE-2025-11340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed...

Linux Distros Unpatched Vulnerability : CVE-2025-2934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 5.2 prior to 18.2.8, 18.3 prior to 18.3.4, and 18.4 prior to 18.4.2 that could have...

BIT-GITLAB-2025-2934 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 5.2 prior to 18.2.8, 18.3 prior to 18.3.4, and 18.4 prior to 18.4.2 that could have allowed an authenticated attacker to create a denial of service condition by configuring malicious webhook endpoints that send crafted HTT...

BIT-GITLAB-2025-11340 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed authenticated users with read-only API tokens to perform unauthorized write operations on vulnerability records by exploiting incorrectly scope...

BIT-GITLAB-2025-10004 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.12 to 18.2.8, 18.3 to 18.3.4, and 18.4 to 18.4.2 that could make the GitLab instance unresponsive or severely degraded by sending crafted GraphQL queries requesting large repository blobs...