Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-10115
4
MEDIUMCVSS v2
Published
May 16, 2019
Affected
7 projects
Assigned by
MITRE
Severity scale
010
Description
An Insecure Permissions issue (issue 2 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The GitLab Releases feature could allow guest users access to private information like release details and code information.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.< 11.7.8, >= 11.9.0, < 11.9.2, >= 11.8.0, < 11.8.4NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release< 11.7.8, >= 11.9.0, < 11.9.2, >= 11.8.0, < 11.8.4NVD
semantic-release/gitlab
GitHub
Crates.io
RubyGems