Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-12443
9.8
CRITICALCVSS v3
Published
March 10, 2020
CVSS v2
7.5 HIGH
Affected
7 projects
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in GitLab Community and Enterprise Edition 10.2 through 11.11. Multiple features contained Server-Side Request Forgery (SSRF) vulnerabilities caused by an insufficient validation to prevent DNS rebinding attacks.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 11.9.0, <= 11.11.0NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 11.9.0, <= 11.11.0NVD
semantic-release/gitlab
GitHub
Crates.io
RubyGems