Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-0916
7.5
HIGHCVSS v2
Severity scale
010
Description
Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue through web hook component resulting in remote code execution.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 10.3.0, <= 10.3.3, >= 10.2.0, <= 10.2.5, >= 8.8.0, <= 10.1.5NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 10.3.0, <= 10.3.3, >= 10.2.0, <= 10.2.5, >= 8.8.0, <= 10.1.5NVD
semantic-release/gitlab
GitHub
Crates.io
RubyGems