Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-22171
7.3
HIGHCVSS v3
Severity scale
010
Description
Insufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+ allows an attacker to steal a victim's API token if they click on a maliciously crafted link
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 13.7.0, < 13.7.2, >= 13.6.0, < 13.6.4, >= 11.5.0, < 13.5.6NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 13.7.0, < 13.7.2, >= 13.6.0, < 13.6.4, >= 11.5.0, < 13.5.6NVD
GitHub
Crates.io
RubyGems