Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-5464
9.8
CRITICALCVSS v3
Severity scale
010
Description
A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the library is utilized.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 10.2.0, < 11.11.7NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 10.2.0, < 11.11.7NVD
semantic-release/gitlab
GitHub
Crates.io
RubyGems