EUVD-2024-50814

Malicious code in bioql PyPI...

CVE-2024-12379 Allocation of Resources Without Limits or Throttling in GitLab

A denial of service vulnerability in GitLab CE/EE affecting all versions from 14.1 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to impact the availability of GitLab via unbounded symbol creation via the scopes parameter in a Personal Access Token...

CVE-2024-12379

Removed by vendor...

CVE-2024-12379

CVE-2024-12379 is a denial-of-service issue in GitLab CE/EE where an attacker can cause unbounded symbol creation via the scopes parameter in a Personal Access Token, impacting availability. Affected versions run from 14.1 up to 17.6.5, 17.7 up to 17.7.4, and 17.8 up to 17.8.2. The root cause is ...