MAL-2025-2385 Malicious code in gl-emoji-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbf0085827239922ce13937a55f76a51d8017ed351ca34e30214b10670b558a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gl-emoji-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbf0085827239922ce13937a55f76a51d8017ed351ca34e30214b10670b558a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GitLab: Stored XSS on issue comments and other pages which contain notes

Summary This report contains two XSS sanitization bypasses: The SyntaxHighlightFilter creates html from unsanitized data. This can be used to bypass the XSS filter on the server-side. ruby def highlightnodenode ... sourcepos = node.parent.attr'data-sourcepos' ... sourceposattr = sourcepos ?...