Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-8266
4.4
MEDIUMCVSS v3
Severity scale
010
Description
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.6.0, which allows an attacker with maintainer role to trigger a pipeline as project owner under certain circumstances.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 17.1.0, < 17.6.0NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 17.1.0, < 17.6.0NVD
semantic-release/gitlab
GitHub
Docker Hub
Crates.io
RubyGems