Malicious code in work-cpu-process620 (npm)

The package work-cpu-process620 was found to contain malicious code...

Malicious code in work-cpu-process360 (npm)

The package work-cpu-process360 was found to contain malicious code...

Malicious code in work-cpu-process180 (npm)

The package work-cpu-process180 was found to contain malicious code...

MAL-2025-39442 Malicious code in work-cpu-process4 (npm)

The package work-cpu-process4 was found to contain malicious code...

MAL-2025-39449 Malicious code in work-cpu-process88 (npm)

The package work-cpu-process88 was found to contain malicious code...

MAL-2025-39440 Malicious code in work-cpu-process320 (npm)

The package work-cpu-process320 was found to contain malicious code...

MAL-2025-39431 Malicious code in work-cpu-process-web-web-web (npm)

The package work-cpu-process-web-web-web was found to contain malicious code...

MAL-2025-39437 Malicious code in work-cpu-process180 (npm)

The package work-cpu-process180 was found to contain malicious code...

MAL-2025-39445 Malicious code in work-cpu-process620 (npm)

The package work-cpu-process620 was found to contain malicious code...

MAL-2025-39446 Malicious code in work-cpu-process64 (npm)

The package work-cpu-process64 was found to contain malicious code...

MAL-2025-39434 Malicious code in work-cpu-process12 (npm)

The package work-cpu-process12 was found to contain malicious code...

GitLab 18.1 < 18.1.4 / 18.2 < 18.2.2 (CVE-2025-6186)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to achieve account takeover by injecting...

CVE-2025-6186

An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to achieve account takeover by injecting malicious HTML into work item names...

UBUNTU-CVE-2025-6186

An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to achieve account takeover by injecting malicious HTML into work item names...

CVE-2025-6186

Removed by vendor...

CVE-2025-6186 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to achieve account takeover by injecting malicious HTML into work item names...

CVE-2025-6186 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to achieve account takeover by injecting malicious HTML into work item names...

CVE-2025-6186

CVE-2025-6186 affects GitLab CE/EE: all versions from 18.1 before 18.1.4 and 18.2 before 18.2.2. The issue allows authenticated users to potentially take over accounts by injecting malicious HTML into work item names. Connected sources (OSV entries) confirm the same description and affected versi...

CVE-2025-6186 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to achieve account takeover by injecting malicious HTML into work item names...

Gitlab -- vulnerabilities

Gitlab reports: Cross-site scripting issue in blob viewer impacts GitLab CE/EE Cross-site scripting issue in labels impacts GitLab CE/EE Cross-site scripting issue in Workitem impacts GitLab CE/EE Improper Handling of Permissions issue in project API impacts GitLab CE/EE Incorrect Privilege...