CVE-2024-9623 Incorrect Authorization in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys to push to an archived repository...

CVE-2024-9623 Incorrect Authorization in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys to push to an archived repository...

CVE-2024-9623

CVE-2024-9623 affects GitLab CE/EE versions 8.16–17.2.9, 17.3–17.3.5, and 17.4–17.4.2, enabling deploy keys to push to archived repositories. The connected documents confirm the affected ranges and the action (deploy keys abuse), but no explicit root-cause details beyond the described behavior ar...

CVE-2024-9623

Removed by vendor...

MAL-2024-9244 Malicious code in prismjs-editor-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 040f9d206fa46c86f67191c2a1777918670867a6e0888635b2f08567360ba10f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9239 Malicious code in jacoco-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b69d2d6c05db4695b8af9c114b5851c1c95e7e59f07fa671941231429709fb2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9220 Malicious code in com.sendbird.calls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673f118ef1bd121c69542e3a9d813f6e42601d38118849a030f91f89ecacd45b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9248 Malicious code in redux-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f0972d9d0c165383cf5d724889a9c0b58cd2ffa5ff2ec57df1d3f56a33b5609 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9236 Malicious code in hubs-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9911fbb7c4054a35f69df90bf8f46b5d9bf5e2be6e2eaafc492ca5ceb11ed9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9256 Malicious code in typescript-error-reporter-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94ae0fc6c94bf4a0b84cd232b32cd4e5e36d035e62b1dea57e7c41d39d2c2406 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9252 Malicious code in sendbird-uikit-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaffc5bb1fbe1dacdaed2b5c1c01a1b1a477d9f4572976e8a0c637012233adc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9237 Malicious code in hubs-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c72c2b5b928c9cc0211f1440d05124b34af18a3c21c7db1bb0ac7d72d12c39cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9231 Malicious code in dynsegmentationserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4525a5815706847fd3060b12cfa83f7c24f6f1b1aad7bdfcee12c4ea5eed93b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9247 Malicious code in rdservices (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 407109fba308aff582f027f4073c0bbd8b520c409204766550a195262246549d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9243 Malicious code in numeral-light (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0745207c17df1a5cbcd760a28f72def582f071d4860ce74387cd251b4556c1a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9218 Malicious code in briefer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efa6bd2ebe5c195fe6bdd0c5673fdbd52426e7e32444b1483839d30cd2207189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blockpi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd90ac1ab38adb471705c02da1ac6a2113755a7e00e9851597a6b5226bbf075a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9232 Malicious code in ens-metadata-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2081a78185962d36398bd09a1f7f68d7724d64666f2c33343bf15011892e8a93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9242 Malicious code in node-red-contrib-lowwercase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 577092139d0eab16ce212c5f1857a5bd55b8632d4d93358b21d74e379dbf7f60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9235 Malicious code in helri-shiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4d519e88d591f17cacd1c40eb414b21e026b9ea5d54240b23399cf203aeb084 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...