Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-0882
4
MEDIUMCVSS v2
Severity scale
010
Description
Multiple versions of GitLab expose sensitive user credentials when assigning a user to an issue or merge request. A fix was included in versions 8.15.8, 8.16.7, and 8.17.4, which were released on March 20th 2017 at 23:59 UTC.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.= 8.16.5, = 8.6.7, = 8.17.3, = 8.13.3, = 8.13.2, = 8.12.0, = 8.16.4, = 8.15.6, = 8.4.10, = 8.14.2, = 8.14.3, = 8.15.2, = 8.15.3, = 8.4.9, = 8.17.2, = 8.16.7, = 8.10.13, = 8.12.7, = 8.14.0, = 8.7.0, = 8.6.8, = 8.2.3, = 8.2.1, = 8.14.1, = 8.15.5, = 8.2.5, = 8.11.0, = 8.14.4, = 8.14.5, = 8.15.0, = 8.15.1, = 8.5.0, = 8.4.0, = 8.17.0, = 8.15.4, = 8.6.0, = 8.5.11, = 8.3.0, = 8.2.4, = 8.13.0, = 8.10.0, = 8.3.9, = 8.11.9, = 8.11.10, = 8.16.0, = 8.16.1, = 8.16.2, = 8.16.3, = 8.7.1, = 8.2.2, = 8.2.0, = 8.14.6, = 8.17.1, = 8.16.6, = 8.15.7, = 8.5.12, = 8.3.8, = 8.12.8, = 8.10.12NVD
gitlab
Crates.ioGitlab API client.
Crates.ioGitlab API client.
= 8.16.5, = 8.6.7, = 8.17.3, = 8.13.3, = 8.13.2, = 8.12.0, = 8.16.4, = 8.15.6, = 8.4.10, = 8.14.2, = 8.14.3, = 8.15.2, = 8.15.3, = 8.4.9, = 8.17.2, = 8.16.7, = 8.10.13, = 8.12.7, = 8.14.0, = 8.7.0, = 8.6.8, = 8.2.3, = 8.2.1, = 8.14.1, = 8.15.5, = 8.2.5, = 8.11.0, = 8.14.4, = 8.14.5, = 8.15.0, = 8.15.1, = 8.5.0, = 8.4.0, = 8.17.0, = 8.15.4, = 8.6.0, = 8.5.11, = 8.3.0, = 8.2.4, = 8.13.0, = 8.10.0, = 8.3.9, = 8.11.9, = 8.11.10, = 8.16.0, = 8.16.1, = 8.16.2, = 8.16.3, = 8.7.1, = 8.2.2, = 8.2.0, = 8.14.6, = 8.17.1, = 8.16.6, = 8.15.7, = 8.5.12, = 8.3.8, = 8.12.8, = 8.10.12
RubyGems
GitHub