EUVD-2025-179710

Malicious code in cloud-class-stack-xml-runtime npm...

CVE-2024-4201

GitLab CVE-2024-4201 describes a cross-site scripting flaw when viewing XML in raw mode, affecting all versions from 5.1 up to 16.10.7, 16.11 up to 16.111.4, and 17.0 up to 17.0.2. Root cause: inadequate sanitization/rendering of raw XHTML that can render as HTML under specific circumstances. Imp...