Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-12605
3.5
LOWCVSS v2
Published
August 3, 2018
Affected
7 projects
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in GitLab Community Edition and Enterprise Edition 10.7.x before 10.7.6. The usage of 'url_for' contained a XSS issue due to it allowing arbitrary protocols as a parameter.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 10.7.0, < 10.7.6NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 10.7.0, < 10.7.6NVD
semantic-release/gitlab
GitHub
Crates.io
RubyGems