Rafabd1

**Name of the Vulnerable Software and Affected Versions** SvelteKit versions 2.38.0 through 2.60.0 **Description** A race condition exists in the `query.batch` function. This flaw allows concurrent requests from different users to merge under a single request context, enabling attackers to exploit specific timing conditions to access sensitive data from other users' concurrent requests. **Recommendations** Update SvelteKit to version 2.60.1 or later.

**Name of the Vulnerable Software and Affected Versions** GitLab CE/EE versions 18.6 through 18.6.5 GitLab CE/EE versions 18.7 through 18.7.3 GitLab CE/EE versions 18.8 through 18.8.3 **Description** An authenticated user could inject malicious content into project label titles. This issue affects GitLab CE/EE. **Recommendations** Update GitLab CE/EE to version 18.6.6 or later. Update GitLab CE/EE to version 18.7.4 or later. Update GitLab CE/EE to version 18.8.4 or later.