Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-10084
5.3
MEDIUMCVSS v3
Published
March 13, 2020
CVSS v2
5 MEDIUM
Affected
7 projects
Assigned by
MITRE
Severity scale
010
Description
GitLab EE 11.6 through 12.8.1 allows Information Disclosure. Sending a specially crafted request to the vulnerability_feedback endpoint could result in the exposure of a private project namespace
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 11.6.0, <= 12.8.1NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 11.6.0, <= 12.8.1NVD
semantic-release/gitlab
GitHub
Crates.io
RubyGems