Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-7977
5.3
MEDIUMCVSS v3
Published
February 5, 2020
CVSS v2
4.3 MEDIUM
Affected
7 projects
Assigned by
MITRE
Severity scale
010
Description
GitLab EE 8.8 and later through 12.7.2 has Insecure Permissions.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 12.6.0, < 12.6.6, >= 8.8.0, < 12.5.9, >= 12.7.0, <= 12.7.2NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 12.6.0, < 12.6.6, >= 8.8.0, < 12.5.9, >= 12.7.0, <= 12.7.2NVD
semantic-release/gitlab
GitHub
Crates.io
RubyGems