Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-17451
8.8
HIGHCVSS v3
Published
April 15, 2023
Affected
9 projects
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Cross Site Request Forgery (CSRF) in the Slack integration for issuing slash commands.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 11.2.0, < 11.2.4, < 11.1.7, = 11.3.0NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 11.2.0, < 11.2.4, < 11.1.7, = 11.3.0NVD
semantic-release/gitlab
GitHub
Docker Hub
Crates.io
RubyGems