GitLab's Threat Research Group found a flaw, ConfigPoisoning, that runs attacker code when a developer views a file's diff in DeepSeek-Reasonix.
GitLab's Threat Research Group found a critical sandbox escape in vm2 that runs attacker code using the library's own documented configuration.
GitLab's Threat Research Group found a critical template injection in Serena that runs attacker code the moment a developer opens a repository.
All fields required
See what your team could do with a unified DevSecOps Platform
Find out which plan works best for your team
Learn about what GitLab can do for your team