4794 matches found
CVE-2025-12983 Memory Allocation with Excessive Size Value in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to cause a denial of service condition by submitting specially crafted markdown content with nested formattin...
CVE-2025-12983 Memory Allocation with Excessive Size Value in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to cause a denial of service condition by submitting specially crafted markdown content with nested formattin...
CVE-2025-12983
GitLab CE/EE is affected by CVE-2025-12983 in all versions prior to 18.3.6 (18.4 prior to 18.4.4 and 18.5 prior to 18.5.2). An authenticated attacker could cause a denial-of-service by submitting specially crafted markdown with nested formatting patterns. Mitigation is to upgrade to GitLab to 18....
CVE-2025-12983
Removed by vendor...
CVE-2025-12983 Memory Allocation with Excessive Size Value in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to cause a denial of service condition by submitting specially crafted markdown content with nested formattin...
PT-2025-47049
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 16.9 through 18.3.6 GitLab CE/EE versions 18.4 through 18.4.4 GitLab CE/EE versions 18.5 through 18.5.2 Description An authenticated attacker could cause a denial of service condition by submitting specially crafted...
GitLab 安全漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab CE and EE versions 16.9 through 18.3...
Improper Input Validation
mkdocs-include-markdown-plugin is vulnerable to improper input validation. The vulnerability is due to unvalidated input colliding with substitution placeholders, which allows an attacker to manipulate included Markdown content and potentially inject or alter data...
EUVD-2025-178086
Malicious code in link-slidev-dione-markdown-pdf npm...
EUVD-2025-176894
Malicious code in puppeteer-meissa-prettier-plugin-markdown-sadr npm...
EUVD-2025-177070
Malicious code in prettier-plugin-markdown-lint-jest-scripts npm...
EUVD-2025-177074
Malicious code in prettier-plugin-markdown-aquarius-colors-antares npm...
EUVD-2025-177959
Malicious code in markdown-cz-conventional-changelog-link-proxima npm...
EUVD-2025-177951
Malicious code in markdown-pdf-boson-magnetosphere-paleontology npm...
EUVD-2025-176715
Malicious code in relay-yaml-markdown-cosmicsilence npm...
EUVD-2025-180034
Malicious code in blazar-markdown-umbriel-filament npm...
EUVD-2025-178717
Malicious code in geodynamo-stop-hexo-markdown-pdf npm...
Malicious code in ariel-markdown-arcturus-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f906563d9aed4a7980a31a32bfc6ae14daf13ed46d446a279c6169602dc258e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...