Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-15592
4.3
MEDIUMCVSS v3
Severity scale
010
Description
GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge request ID associated to an issue via the activity timeline.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.= *, >= 12.2.0, < 12.2.3, >= 12.1.0, < 12.1.8, >= 11.2.0, < 12.0.8NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release= *, >= 12.2.0, < 12.2.3, >= 12.1.0, < 12.1.8, >= 11.2.0, < 12.0.8NVD
GitHub
Crates.io
RubyGems