Attributed metadata history

Up to 100 retained publisher events per page for d0be831df65970a09951c2c123a65399a1e09b45fd2b81b866fc481693771529. Withdrawals and unavailable references remain attributed to their publishers.

intelligence_src_d11443da85ea659d49

observed · 2026-10-12 15:37:04 UTC

A remote prompt injection vulnerability in GitLab Duo allowed attackers to steal source code from private projects, manipulate code suggestions, and exfiltrate confidential information. The attack chain involved hidden prompts, HTML injection, and exploitation of Duo's access to private data. GitLab has since patched both the HTML and prompt injection vectors.

Fingerprint: d9e291b97c9504fddb6cd61ab2bfab01bd499f5d951db0f0e2d59ab19905819b

intelligence_src_d11443da85ea659d49

observed · 2026-10-12 15:37:03 UTC

available

Fingerprint: 46fd50ac705e064c7517d97d61b5ec511c9b1ada6209622159dd39573ba08e5c