Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2019-15730 — HIGH severity vulnerability | Release Alert

CVE-2019-15730

7.5

HIGHCVSS v3

Published

September 16, 2019

CVSS v2

5 MEDIUM

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

An issue was discovered in GitLab Community and Enterprise Edition 8.14 through 12.2.1. The Jira integration contains a SSRF vulnerability as a result of a bypass of the current protection mechanisms against this type of attack, which would allow sending requests to any resources accessible in the local network by the GitLab server.

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

>= 12.2.0, < 12.2.3, >= 12.1.0, < 12.1.8, >= 8.14.0, < 12.0.8NVD

@semantic-release/gitlab

NPMsemantic-release plugin to publish a GitLab release

>= 12.2.0, < 12.2.3, >= 12.1.0, < 12.1.8, >= 8.14.0, < 12.0.8NVD

semantic-release/gitlab

GitHub

More on this CVE

NVD↗GitHub Advisory↗

:fox_face: semantic-release plugin to publish a GitLab release

>= 12.2.0, < 12.2.3, >= 12.1.0, < 12.1.8, >= 8.14.0, < 12.0.8NVD

Python Package IndexGet GitLab user Details

>= 12.2.0, < 12.2.3, >= 12.1.0, < 12.1.8, >= 8.14.0, < 12.0.8NVD

Crates.ioGitlab API client.

>= 12.2.0, < 12.2.3, >= 12.1.0, < 12.1.8, >= 8.14.0, < 12.0.8NVD

RubyGemsRuby client and CLI for GitLab API

>= 12.2.0, < 12.2.3, >= 12.1.0, < 12.1.8, >= 8.14.0, < 12.0.8NVD

GitHubRuby wrapper and CLI for the GitLab REST API

>= 12.2.0, < 12.2.3, >= 12.1.0, < 12.1.8, >= 8.14.0, < 12.0.8NVD