EUVD-2023-12309

Malicious code in bioql PyPI...

CVE-2023-0223

GitLab CVE-2023-0223 affects 15.5–15.7.7, 15.8 (before 15.8.4), and 15.9 (before 15.9.2); non-project members could fetch release descriptions via the API, bypassing project visibility. Remediation: upgrade to patched versions 15.7.8, 15.8.4, or 15.9.2 respectively.

Gitlab -- Multiple Vulnerabilities

Gitlab reports: Stored XSS via Kroki diagram Prometheus integration Google IAP details are not hidden, may leak account details from instance/group/project settings Improper validation of SSO and SCIM tokens while managing groups Maintainer can leak Datadog API key by changing Datadog site...

PT-2023-13420 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 11.3 through 15.3.4 GitLab CE/EE versions 15.4 through 15.4.3 GitLab CE/EE versions 15.5 through 15.5.1 Description: An issue with access control in GitLab CE/EE allowed unauthorized users to view release names, even whe...