Gitlab -- vulnerabilities

Gitlab reports: Improper Access Control issue in Group SAML Identity API impacts GitLab EE Cross-site Scripting issue in Analytics Dashboard impacts GitLab EE Denial of Service issue in Grape API JSON parsing middleware impacts GitLab CE/EE HTML injection issue in certain group setting fields...

grape (0.2.5), neat-ml (0.1.0) potentially affected by unknown CVE via embiggen (0.11.96)

embiggen PYPI version 0.11.96 is affected by a known vulnerability. The following packages have a transitive dependency on embiggen and may be impacted: - grape 0.2.5 - neat-ml 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-EMBIGGEN-17230566...

claude-code-indexer (>=1.0.1, <=1.29.1), embiggen (0.11.96) +2 more potentially affected by unknown CVE via ensmallen (0.8.100)

ensmallen PYPI version 0.8.100 is affected by a known vulnerability. The following packages have a transitive dependency on ensmallen and may be impacted: - claude-code-indexer =1.0.1, =1.29.1 - embiggen 0.11.96 - grape 0.2.5 - neat-ml 0.1.0 Source cves: unknown CVE Source advisory:...

Malicious code in grape-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83e3d2e06cc388db5b4dd35b61235eaab05d0b607eb7f39607b97590b9e6c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76727

Malicious code in grape-notthedevs npm...

EUVD-2008-1961

Malware in sbrugna...

Malicious code in date-nectarine-grape-jprgq (npm)

The package date-nectarine-grape-jprgq was found to contain malicious code...

Malicious code in juliet-fig-grape-isucf (npm)

The package juliet-fig-grape-isucf was found to contain malicious code...

MAL-2025-45365 Malicious code in november-grape-foxtrot-mwoae (npm)

The package november-grape-foxtrot-mwoae was found to contain malicious code...

MAL-2025-44460 Malicious code in grape-whiskey-quebec-sxnws (npm)

The package grape-whiskey-quebec-sxnws was found to contain malicious code...

Malicious code in charlie-oscar-grape-xxtdt (npm)

The package charlie-oscar-grape-xxtdt was found to contain malicious code...

Malicious code in grape-quebec-mango-ygfow (npm)

The package grape-quebec-mango-ygfow was found to contain malicious code...

MAL-2025-44458 Malicious code in grape-papaya-victor-wpjmv (npm)

The package grape-papaya-victor-wpjmv was found to contain malicious code...

Malicious code in grape-echo-tangerine-xtwns (npm)

The package grape-echo-tangerine-xtwns was found to contain malicious code...

Malicious code in cherry-watermelon-grape-smlaa (npm)

The package cherry-watermelon-grape-smlaa was found to contain malicious code...

Malicious code in november-grape-foxtrot-mwoae (npm)

The package november-grape-foxtrot-mwoae was found to contain malicious code...

MAL-2025-43784 Malicious code in cherry-watermelon-grape-smlaa (npm)

The package cherry-watermelon-grape-smlaa was found to contain malicious code...

MAL-2025-44457 Malicious code in grape-echo-tangerine-xtwns (npm)

The package grape-echo-tangerine-xtwns was found to contain malicious code...

MAL-2025-44830 Malicious code in juliet-fig-grape-isucf (npm)

The package juliet-fig-grape-isucf was found to contain malicious code...

Malicious code in grape-banana-romeo-dpkdl (npm)

The package grape-banana-romeo-dpkdl was found to contain malicious code...