EUVD-2025-20989

Malicious code in bioql PyPI...

EUVD-2022-35132

Malicious code in bioql PyPI...

EUVD-2022-35153

Malicious code in bioql PyPI...

EUVD-2023-33712

Malicious code in bioql PyPI...

EUVD-2024-17463

Malicious code in bioql PyPI...

EUVD-2024-46280

Malicious code in bioql PyPI...

EUVD-2024-49083

Malicious code in bioql PyPI...

EUVD-2022-42464

Malicious code in bioql PyPI...

EUVD-2024-31643

Malicious code in bioql PyPI...

EUVD-2024-48460

Malicious code in bioql PyPI...

EUVD-2025-18166

Malicious code in bioql PyPI...

GitLab Improper Ownership Access Confidential Information

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to improper assignment of ownership rights. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to confidential information...

GitLab Information Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential information...

GitLab Logical Operation DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the improper handling of logical operations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

GitLab 11.10 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-8014)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

CVE-2025-9642 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could allow an attacker to inject malicious content that may lead to account takeover...

CVE-2025-10858

GitLab CE/EE vulnerable to unauthenticated DoS when uploading specially crafted large JSON files. Affected branches: all versions before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1. Impact is Denial of Service (availability impact). CVSS 3.1 base score 7.5 (HIGH) with network attack vector...

GitLab security vulnerabilities

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE and EE versions prior to 18.2.7,...

GitLab 14.10 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-9958)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1, that could have allowed Guest users to access sensitive...

GitLab 17.2 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-11042)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Allocation of Resources Without Limits or Throttling in GitLab CVE-2025-11042 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...