EUVD-2025-16115

Malicious code in bioql PyPI...

EUVD-2025-16116

Malicious code in bioql PyPI...

EUVD-2025-17800

Malicious code in bioql PyPI...

EUVD-2025-0010

Malicious code in bioql PyPI...

EUVD-2025-25951

Malicious code in bioql PyPI...

EUVD-2022-25174

Malicious code in bioql PyPI...

EUVD-2022-28675

Malicious code in bioql PyPI...

EUVD-2023-33963

Malicious code in bioql PyPI...

EUVD-2022-7193

Malicious code in bioql PyPI...

EUVD-2023-2607

Malicious code in bioql PyPI...

EUVD-2024-0403

Malicious code in bioql PyPI...

EUVD-2025-12647

Malicious code in bioql PyPI...

EUVD-2022-15363

Malicious code in bioql PyPI...

EUVD-2022-0647

Malicious code in bioql PyPI...

EUVD-2022-15380

Malicious code in bioql PyPI...

BIT-GITLAB-2025-8014 Allocation of Resources Without Limits or Throttling in GitLab

Denial of Service issue in GraphQL endpoints in Gitlab EE/CE affecting all versions from 11.10 prior to 18.2.7, 18.3 prior to 18.3.3, and 18.4 prior to 18.4.1 allows unauthenticated users to potentially bypass query complexity limits leading to resource exhaustion and service disruption...

BIT-GITLAB-2025-11042 Allocation of Resources Without Limits or Throttling in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1, that allows an attacker to cause uncontrolled CPU consumption, potentially leading to a Denial of Service DoS condition while using specific GraphQL queries...

CVE-2025-8014

Denial of Service issue in GraphQL endpoints in Gitlab EE/CE affecting all versions from 11.10 prior to 18.2.7, 18.3 prior to 18.3.3, and 18.4 prior to 18.4.1 allows unauthenticated users to potentially bypass query complexity limits leading to resource exhaustion and service disruption...

CVE-2025-59845

Apollo Studio Embeddable Explorer & Embeddable Sandbox are website embeddable software solutions from Apollo GraphQL. Prior to Apollo Sandbox version 2.7.2 and Apollo Explorer version 3.7.3, a cross-site request forgery CSRF vulnerability was identified. The vulnerability arises from missing orig...

Vulnerabilities fixed in GitLab EE & CE

GitLab has fixed vulnerabilities in GitLab CE/EE Specifically for versions before 18.2.7, 18.3.3, and 18.4.1. The vulnerabilities include allowing authenticated users to access confidential information by creating projects with the same name as the victim, and gaining unauthorized access to...