Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-17939
5
MEDIUMCVSS v2
Published
December 4, 2018
Affected
7 projects
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via the merge request JSON endpoint.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 11.3.0, < 11.3.2, >= 11.2.0, < 11.2.5, >= 11.1.0, < 11.1.8NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 11.3.0, < 11.3.2, >= 11.2.0, < 11.2.5, >= 11.1.0, < 11.1.8NVD
semantic-release/gitlab
GitHub
Crates.io
RubyGems