Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-0924
4.3
MEDIUMCVSS v2
Severity scale
010
Description
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 10.3.0, <= 10.3.3, >= 10.0.0, <= 10.1.5, >= 10.2.0, <= 10.2.5, >= 9.0.0, <= 9.5.10NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 10.3.0, <= 10.3.3, >= 10.0.0, <= 10.1.5, >= 10.2.0, <= 10.2.5, >= 9.0.0, <= 9.5.10NVD
GitHub
Crates.io
RubyGems