Lucene search
+L

3 matches found

OSV
OSV
added 2025/10/27 8:15 p.m.22 views

GHSA-P3V4-C93G-CMHW BBOT's gitlab.py exposes globally configured "gitlab" API key

Summary bbot's gitlab.py sends the user's "gitlab" API key to on-premise GitLab instances. If a user has configured a gitlab.com API key using this mechanism, it may be leaked to an attacker-controlled server. Impact A user with a "gitlab" API key configured who uses bbot to scan a malicious...

4.7CVSS6.6AI score0.00215EPSS
SaveExploits0References4
Rows per page
Query Builder