Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2021-39939 — MEDIUM severity vulnerability | Release Alert

CVE-2021-39939

6.5

MEDIUMCVSS v3

Published

December 13, 2021

CVSS v2

4 MEDIUM

Affected

9 projects

Assigned by

[email protected]

Severity scale

010

Description

An uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions starting from 13.7 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker triggering a job with a specially crafted docker image to exhaust resources on runner manager

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

>= 14.4.0, < 14.4.4, >= 14.5.0, < 14.5.2, >= 13.7.0, < 14.3.6NVD

@semantic-release/gitlab

NPMsemantic-release plugin to publish a GitLab release

>= 14.4.0, < 14.4.4, >= 14.5.0, < 14.5.2, >= 13.7.0, < 14.3.6NVD

semantic-release/gitlab

More on this CVE

NVD↗GitHub Advisory↗

GitHub:fox_face: semantic-release plugin to publish a GitLab release

>= 14.4.0, < 14.4.4, >= 14.5.0, < 14.5.2, >= 13.7.0, < 14.3.6NVD

gitlab-org/gitlab-runner

GitLabGitLab Runner is the open source project that is used to run your CI/CD jobs and send the results back to GitLab

NVD

Docker Hubgitlab docker image for arm64

>= 14.4.0, < 14.4.4, >= 14.5.0, < 14.5.2, >= 13.7.0, < 14.3.6NVD

Python Package IndexGet GitLab user Details

>= 14.4.0, < 14.4.4, >= 14.5.0, < 14.5.2, >= 13.7.0, < 14.3.6NVD

Crates.ioGitlab API client.

>= 14.4.0, < 14.4.4, >= 14.5.0, < 14.5.2, >= 13.7.0, < 14.3.6NVD

RubyGemsRuby client and CLI for GitLab API

>= 14.4.0, < 14.4.4, >= 14.5.0, < 14.5.2, >= 13.7.0, < 14.3.6NVD

GitHubRuby wrapper and CLI for the GitLab REST API

>= 14.4.0, < 14.4.4, >= 14.5.0, < 14.5.2, >= 13.7.0, < 14.3.6NVD