Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-31485
5.9
MEDIUMCVSS v3
Published
April 29, 2023
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-the-middle attacks.
GitHub