Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-19577
5.3
MEDIUMCVSS v3
Published
July 10, 2019
CVSS v2
5 MEDIUM
Affected
7 projects
Assigned by
MITRE
Severity scale
010
Description
Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability that displays to an unauthorized user the title and namespace of a confidential issue.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 11.4.0, < 11.4.8, >= 11.5.0, < 11.5.1, >= 8.6.0, < 11.3.11NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 11.4.0, < 11.4.8, >= 11.5.0, < 11.5.1, >= 8.6.0, < 11.3.11NVD
semantic-release/gitlab
GitHub
Crates.io
RubyGems