BIT-gitlab-2024-1211

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 in which cross-si ...

Continue Reading
CVE-2024-57432

macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions. The application's JWT signing keys are hardcoded and do not change. User information is explicitly written into the JWT and used for ...

Continue Reading
CVE-2024-1211 Cross-Site Request Forgery (CSRF) in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 in which cross-si ...

Continue Reading
UBUNTU-CVE-2024-1211

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 in which cross-si ...

Continue Reading
GHSA-34JH-P97F-MPXF vulnerabilities

Vulnerabilities for packages: ggshield, kubeflow-pipelines-visualization-server, py3-urllib3, py3-pipenv, k8s-sidecar, mlflow, jwt-tool, superset, checkov, kubeflow-pipelines, confluent-docker-utils, ...

Continue Reading
CVE-2024-37891 vulnerabilities

Vulnerabilities for packages: ggshield, kubeflow-pipelines-visualization-server, py3-urllib3, py3-pipenv, k8s-sidecar, mlflow, jwt-tool, superset, checkov, kubeflow-pipelines, confluent-docker-utils, ...

Continue Reading
CVE-2024-39689 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-certifi, k8s-sidecar, mlflow, jwt-tool, superset, checkov, kubeflow-pipelines, confluent-docker-utils, datadog-agent, kubeflo ...

Continue Reading
GHSA-248V-346W-9CWC vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-certifi, k8s-sidecar, mlflow, jwt-tool, superset, checkov, kubeflow-pipelines, confluent-docker-utils, datadog-agent, kubeflo ...

Continue Reading

Back to Main

Subscribe for the latest news: