Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-19629
7.5
HIGHCVSS v3
Published
January 5, 2020
CVSS v2
5 MEDIUM
Affected
7 projects
Assigned by
MITRE
Severity scale
010
Description
In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclosed via the Group Search API provided by the Elasticsearch integration.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 10.5.0, <= 12.3.8, >= 12.4.0, <= 12.4.5, >= 12.5.0, <= 12.5.3NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 10.5.0, <= 12.3.8, >= 12.4.0, <= 12.4.5, >= 12.5.0, <= 12.5.3NVD
GitHub
Crates.io
RubyGems