EUVD-2021-9998

Malicious code in bioql PyPI...

EUVD-2024-3123

Malicious code in bioql PyPI...

EUVD-2022-6921

Malicious code in bioql PyPI...

EUVD-2021-9370

Malicious code in bioql PyPI...

EUVD-2022-25174

Malicious code in bioql PyPI...

EUVD-2025-0010

Malicious code in bioql PyPI...

EUVD-2022-28675

Malicious code in bioql PyPI...

EUVD-2025-25951

Malicious code in bioql PyPI...

EUVD-2022-1685

Malicious code in bioql PyPI...

EUVD-2024-2419

Malicious code in bioql PyPI...

EUVD-2022-15363

Malicious code in bioql PyPI...

The vulnerability of the GraphQL API component of the software platform based on Git, which facilitates collaborative code development on GitLab, allows a hacker to trigger a service failure.

The vulnerability of the GraphQL API component of the software platform based on Git for collaborative code development on GitLab is related to the unlimited distribution of resources during HTTP response processing. Exploiting this vulnerability can allow a malicious actor to cause service...

CVE-2025-10867

An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated user to create a denial-of-service condition by exploiting an unprotected GraphQL API through repeated requests...

CVE-2025-10867

An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated user to create a denial-of-service condition by exploiting an unprotected GraphQL API through repeated requests...

CVE-2025-10867 Allocation of Resources Without Limits or Throttling in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated user to create a denial-of-service condition by exploiting an unprotected GraphQL API through repeated requests...

CVE-2025-10867

Removed by vendor...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE and EE versions prior to 18.2.7,...

CVE-2025-10867: Allocation of Resources Without Limits or Throttling

An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated user to create a denial-of-service condition by exploiting an unprotected GraphQL API through repeated requests...

FreeBSD : Gitlab -- Vulnerabilities (477fdc04-9aa2-11f0-961b-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 477fdc04-9aa2-11f0-961b-2cf05da270f3 advisory. Gitlab reports: Denial of Service issue when uploading specifically crafted JSON files impacts...

Gitlab -- Vulnerabilities

Gitlab reports: Denial of Service issue when uploading specifically crafted JSON files impacts GitLab CE/EE Denial of Service issue bypassing query complexity limits impacts GitLab CE/EE Information disclosure issue in virtual registery configuration for low privileged users impacts GitLab CE/EE...