Supply Chain and Malicious Code

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Ent…CVE-2013-4582GitLab · 1.9% likely

   CWE-829

2. Dependency on Vulnerable Third-Party Component in GitLabCVE-2023-5332GitLab · CVSS 5.9 · 0.9% likely

   CWE-1395

3. Inclusion of Functionality from Untrusted Control Sphere in GitLabCVE-2026-18252GitLab · CVSS 7.3 · 0.5% likelycovered by CyberSIXT

   CWE-8291 article

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.