Malicious code in namacida-minuday-kas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af97f2085ef4f3bd1c37ec2e11539e6fa1f3b59ad59d4d2a718c3538795a2db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kas-ahakaoliaaji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30bff598dfe158fad783c53b6eb2f50467b163ec46820f144dffd6ec52474443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140649

Malicious code in ksai-kas-ahakaoliaaji npm...

EUVD-2024-47151

Malicious code in bioql PyPI...

kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove

In the Linux kernel, the following vulnerability has been resolved: memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove This fixes the following crash: ================================================================== BUG: KASAN: slab-use-after-free in rtsxusbmspollcard+0x159/0x20...

CVE-2024-5469

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests...

SUSE CVE-2022-49078

In the Linux kernel, the following vulnerability has been resolved: lz4: fix LZ4decompresssafepartial read out of bound When partialDecoding, it is EOF if we've either filled the output buffer or can't proceed with reading an offset for following match. In some extreme corner cases when compresse...

GHSA-Q9W6-CWJ4-GF4P vulnerabilities

Vulnerabilities for packages: temporal-ui-server, temporal-server, temporal...

GHSA-Q9W6-CWJ4-GF4P vulnerabilities

Vulnerabilities for packages: temporal-fips, temporal-server-fips, temporal-ui-server, temporal-ui-server-fips, temporal-server, temporal...

CVE-2025-1243 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, temporal-server, temporal...

DEBIAN-CVE-2025-21652

In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix use-after-free in ipvlangetiflink. syzbot presented an use-after-free report 0 regarding ipvlan and linkwatch. ipvlan does not hold a refcnt of the lower device unlike vlan and macvlan. If the linkwatch work is...

BIT-GITLAB-2024-5469 Uncontrolled Resource Consumption in GitLab

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests...

CVE-2024-5469

Removed by vendor...

CVE-2024-5469 Uncontrolled Resource Consumption in GitLab

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests...

CVE-2024-5469 Uncontrolled Resource Consumption in GitLab

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests...

CVE-2024-5469

CVE-2024-5469 affects GitLab CE/EE KAS. A DoS via crafted gRPC requests crashes KAS, impacting all versions 16.10.0–16.10.5 and 16.11.0–16.11.2 (pre-16.10.6 and pre-16.11.3). Exploit details are not provided in the documents; no active exploit specifics are given here. Connected notes indicate Gi...

CVE-2024-5469 Uncontrolled Resource Consumption in GitLab

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests...

CVE-2024-5469: Improper Check for Unusual or Exceptional Conditions

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests...

FreeBSD : Gitlab -- Vulnerabilities (92cd1c03-2940-11ef-bc02-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 92cd1c03-2940-11ef-bc02-001b217b3468 advisory. Gitlab reports: ReDoS in gomod dependency linker ReDoS in CI interpolation fix bypass ReDoS in...

Gitlab -- Vulnerabilities

Gitlab reports: ReDoS in gomod dependency linker ReDoS in CI interpolation fix bypass ReDoS in Asana integration issue mapping when webhook is called XSS and content injection when viewing raw XHTML files on iOS devices Missing agentk request validation could cause KAS to panic...