Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-12426
6.8
MEDIUMCVSS v2
Published
August 14, 2017
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.= 9.2.2, = 9.0.9, = 9.0.2, = 9.4.0, = 9.0.8, = 9.0.1, = 9.0.6, = 9.3.4, = 9.1.6, = 9.3.2, = 9.2.8, = 9.1.4, = 9.0.12, = 9.3.6, = 9.2.4, = 9.2.1, = 9.1.1, = 9.0.5, = 9.1.8, = 9.1.7, = 9.3.1, = 9.0.0, = 9.3.5, = 9.3.9, = 9.2.7, <= 8.17.7, = 9.4.3, = 9.1.0, = 9.1.2, = 9.1.9, = 9.0.3, = 9.0.10, = 9.3.0, = 9.3.7, = 9.2.5, = 9.2.9, = 9.4.2, = 9.4.1, = 9.3.3, = 9.1.5, = 9.0.4, = 9.3.8, = 9.2.0, = 9.2.6, = 9.1.3, = 9.0.11, = 9.2.3, = 9.0.7NVD
gitlab
Crates.ioGitlab API client.
Crates.ioGitlab API client.
= 9.2.2, = 9.0.9, = 9.0.2, = 9.4.0, = 9.0.8, = 9.0.1, = 9.0.6, = 9.3.4, = 9.1.6, = 9.3.2, = 9.2.8, = 9.1.4, = 9.0.12, = 9.3.6, = 9.2.4, = 9.2.1, = 9.1.1, = 9.0.5, = 9.1.8, = 9.1.7, = 9.3.1, = 9.0.0, = 9.3.5, = 9.3.9, = 9.2.7, <= 8.17.7, = 9.4.3, = 9.1.0, = 9.1.2, = 9.1.9, = 9.0.3, = 9.0.10, = 9.3.0, = 9.3.7, = 9.2.5, = 9.2.9, = 9.4.2, = 9.4.1, = 9.3.3, = 9.1.5, = 9.0.4, = 9.3.8, = 9.2.0, = 9.2.6, = 9.1.3, = 9.0.11, = 9.2.3, = 9.0.7NVD
RubyGems
GitHub