Linux Distros Unpatched Vulnerability : CVE-2025-11224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allow...

Towards Classifying Benign and Malicious Packages Using Machine Learning

Recently, the number of malicious open-source packages in package repositories has been increasing dramatically. While major security scanners focus on identifying known Common Vulnerabilities and Exposures CVEs in open-source packages, there are very few studies on detecting malicious packages...

Important Photon OS Security Update - PHSA-2025-4.0-0910

Updates of 'linux' packages of Photon OS have been released...

1k-tasks (>=4.0.0, <=4.2.2), @514labs/sloan-mcp (0.0.68) +1189 more potentially affected by CVE-2025-64756 via glob (>=11.0.0, <=11.0.3)

glob NPM version =11.0.0, =4.0.0, =0.1.0, =4.10.0, =16.5.13, =1.0.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.5-alpha.2, =0.1.4-alpha.0, =0.1.1, =0.1.6 and more Source cves: CVE-2025-64756 Source advisory: OSV:GHSA-5J98-MCP5-4VW2...

1k-tasks (>=4.0.0, <=4.2.2), @514labs/sloan-mcp (0.0.68) +1189 more potentially affected by CVE-2025-64756 via glob (>=11.0.0, <=11.0.3)

glob NPM version =11.0.0, =4.0.0, =0.1.0, =4.10.0, =16.5.13, =1.0.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.5-alpha.2, =0.1.4-alpha.0, =0.1.1, =0.1.6 and more Source cves: CVE-2025-64756 Source advisory: SNYK:JS-GLOB-14040952...

CVE-2025-6171

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker with reporter access to view branch names and pipeline details by accessing the packages API endpoint even wh...

SUSE: Security Advisory (SUSE-SU-2025:4096-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-VC2M-M665-8XM2 vulnerabilities

Vulnerabilities for packages: python...

GHSA-VC2M-M665-8XM2 vulnerabilities

Vulnerabilities for packages: python...

EUVD-2025-197692

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker with reporter access to view branch names and pipeline details by accessing the packages API endpoint even wh...

CVE-2025-6171

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker with reporter access to view branch names and pipeline details by accessing the packages API endpoint even wh...

UBUNTU-CVE-2025-6171

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker with reporter access to view branch names and pipeline details by accessing the packages API endpoint even wh...

CVE-2025-6171 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker with reporter access to view branch names and pipeline details by accessing the packages API endpoint even wh...

CVE-2025-6171 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker with reporter access to view branch names and pipeline details by accessing the packages API endpoint even wh...

CVE-2025-6171

GitLab CVE-2025-6171 is a disclosed vulnerability in GitLab CE/EE that allowed an authenticated user with reporter access to view branch names and pipeline details via the Packages API endpoint even when repository access was disabled. Affected versions run from 13.2 up to before 18.3.6, 18.4 up ...

CVE-2025-6171 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker with reporter access to view branch names and pipeline details by accessing the packages API endpoint even wh...

PT-2025-47051

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 13.2 through 18.3.5 GitLab CE/EE versions 18.4 through 18.4.3 GitLab CE/EE versions 18.5 through 18.5.1 Description An authenticated attacker with reporter access could view branch names and pipeline details by accessing...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab CE and EE versions 13.2 through 18.3...

Slackware Linux 15.0 / current xpdf Multiple Vulnerabilities (SSA:2025-319-01)

The version of xpdf installed on the remote host is prior to 4.06. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-319-01 advisory. New xpdf packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...

10minions-engine (>=0.0.1, <=0.0.4), 3ui (>=0.1.0, <=0.1.8) +1807 more potentially affected by CVE-2025-13204 via expr-eval (2.0.2)

expr-eval NPM version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on expr-eval and may be impacted: - 10minions-engine =0.0.1, =0.1.0, =1.0.2, =1.2.0, =1.0.0, =0.1.4, =0.0.1, =0.4.2, =0.4.4 - @activepieces/piece-aianswer 0.1.5 and more Source...