HeadFlash Security
GitLab patches maximum-severity flaw reaching back to 2014
3:56
GitLab fixes a CVSS 10.0 unauthenticated RCE, Railway tells all users to rotate keys, and Node2Shell hits Node.js.
Sources:
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
Developer platform Railway urges 'all users' to revoke secret keys after cyberattack | TechCrunch
Node2Shell: Node.js Brotli vulnerability allows remote code execution…