Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-19582
4
MEDIUMCVSS v2
Published
July 10, 2019
Affected
7 projects
Assigned by
MITRE
Severity scale
010
Description
GitLab EE, versions 11.4 before 11.4.8 and 11.5 before 11.5.1, is affected by an insecure direct object reference vulnerability that permits an unauthorized user to publish the draft merge request comments of another user.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 11.4.0, < 11.4.8, >= 11.5.0, < 11.5.1NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 11.4.0, < 11.4.8, >= 11.5.0, < 11.5.1NVD
semantic-release/gitlab
GitHub
Crates.io
RubyGems