Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-13010
5.9
MEDIUMCVSS v3
Published
March 10, 2020
CVSS v2
4.3 MEDIUM
Affected
7 projects
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in GitLab Enterprise Edition 8.3 through 12.0.2. The color codes decoder was vulnerable to a resource depletion attack if specific formats were used. It allows Uncontrolled Resource Consumption.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 8.3.0, <= 12.0.2NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 8.3.0, <= 12.0.2NVD
semantic-release/gitlab
GitHub
Crates.io
RubyGems