BIT-GITLAB-2025-7739 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 18.2 before 18.2.2 that, under certain conditions, could have allowed authenticated users to achieve stored cross-site scripting by injecting malicious HTML content in scoped label descriptions...

CVE-2025-7739

An issue has been discovered in GitLab CE/EE affecting all versions from 18.2 before 18.2.2 that, under certain conditions, could have allowed authenticated users to achieve stored cross-site scripting by injecting malicious HTML content in scoped label descriptions...

MAL-2025-8674 Malicious code in @malware-test-glens-stink-blare-laser/test-mlw3-glens-stink-blare-laser (npm)

The package @malware-test-glens-stink-blare-laser/test-mlw3-glens-stink-blare-laser was found to contain malicious code...

MAL-2025-8920 Malicious code in @malware-test-slish-yolky-pones-hokum/test-mlw3-slish-yolky-pones-hokum (npm)

The package @malware-test-slish-yolky-pones-hokum/test-mlw3-slish-yolky-pones-hokum was found to contain malicious code...

MAL-2025-9085 Malicious code in @malware-test-yucca-moras-pekes-lades/test-mlw3-yucca-moras-pekes-lades (npm)

The package @malware-test-yucca-moras-pekes-lades/test-mlw3-yucca-moras-pekes-lades was found to contain malicious code...

MAL-2025-9498 Malicious code in @teamteanpm2024/architecto-reiciendis-iusto (npm)

The package @teamteanpm2024/architecto-reiciendis-iusto was found to contain malicious code...

Malicious code in @malware-test-rugby-miasm-weest-halva/test-mlw3-rugby-miasm-weest-halva (npm)

The package @malware-test-rugby-miasm-weest-halva/test-mlw3-rugby-miasm-weest-halva was found to contain malicious code...

Malicious code in @malware-test-caboc-testy-taker-sigil/test-mlw3-caboc-testy-taker-sigil (npm)

The package @malware-test-caboc-testy-taker-sigil/test-mlw3-caboc-testy-taker-sigil was found to contain malicious code...

Malicious code in @malware-test-herms-teats-virtu-curia/test-mlw3-herms-teats-virtu-curia (npm)

The package @malware-test-herms-teats-virtu-curia/test-mlw3-herms-teats-virtu-curia was found to contain malicious code...

MAL-2025-8694 Malicious code in @malware-test-gulls-soums-chape-layer/test-mlw3-gulls-soums-chape-layer (npm)

The package @malware-test-gulls-soums-chape-layer/test-mlw3-gulls-soums-chape-layer was found to contain malicious code...

MAL-2025-8621 Malicious code in @malware-test-eloin-sneer-hairy-veery/test-mlw3-eloin-sneer-hairy-veery (npm)

The package @malware-test-eloin-sneer-hairy-veery/test-mlw3-eloin-sneer-hairy-veery was found to contain malicious code...

Malicious code in @malware-test-macer-studs-xebec-salon/test-mlw3-macer-studs-xebec-salon (npm)

The package @malware-test-macer-studs-xebec-salon/test-mlw3-macer-studs-xebec-salon was found to contain malicious code...

Malicious code in @malware-test-ovine-mobby-grant-sadhe/test-mlw3-ovine-mobby-grant-sadhe (npm)

The package @malware-test-ovine-mobby-grant-sadhe/test-mlw3-ovine-mobby-grant-sadhe was found to contain malicious code...

MAL-2025-8451 Malicious code in @malware-test-afire-amass-hover-boxer/test-mlw3-afire-amass-hover-boxer (npm)

The package @malware-test-afire-amass-hover-boxer/test-mlw3-afire-amass-hover-boxer was found to contain malicious code...

UBUNTU-CVE-2025-7739

An issue has been discovered in GitLab CE/EE affecting all versions from 18.2 before 18.2.2 that, under certain conditions, could have allowed authenticated users to achieve stored cross-site scripting by injecting malicious HTML content in scoped label descriptions...

CVE-2025-7739 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 18.2 before 18.2.2 that, under certain conditions, could have allowed authenticated users to achieve stored cross-site scripting by injecting malicious HTML content in scoped label descriptions...

CVE-2025-7739

GitLab CE/EE CVE-2025-7739 affects all versions 18.2 prior to 18.2.2. Under certain conditions, authenticated users could perform stored cross-site scripting by injecting malicious HTML into scoped label descriptions. Root cause described as a stored XSS vulnerability; exploitation status not det...

CVE-2025-7739

Removed by vendor...

CVE-2025-7739 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 18.2 before 18.2.2 that, under certain conditions, could have allowed authenticated users to achieve stored cross-site scripting by injecting malicious HTML content in scoped label descriptions...

DEBIAN-CVE-2025-6140

A vulnerability, which was classified as problematic, was found in spdlog up to 1.15.1. This affects the function scopedpadder in the library include/spdlog/patternformatter-inl.h. The manipulation leads to resource consumption. It is possible to launch the attack on the local host. The exploit h...