A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphQL mutation to alter repository permissions during the trans ...
Continue ReadingJanuary 12, 2024
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: A lack of length validation in GitLab CE/EE affecting all versions from 12.4 before 15.6.7, 15.7 before ...
Continue ReadingJanuary 05, 2024
Summary The product includes vulnerable components (e.g., framework libraries) that might be identified and exploited with automated tools. IBM has addressed the vulnerabilities. Vulnerability Details ...
Continue ReadingJanuary 03, 2024
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.8. GitLab was not ...
Continue ReadingJanuary 03, 2024
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 ...
Continue ReadingJanuary 03, 2024
A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphQL mutation to alter repository permissions during the trans ...
Continue ReadingDecember 21, 2023
In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, lea ...
Continue ReadingDecember 21, 2023
Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large qu ...
Continue ReadingDecember 15, 2023
Back to Main