Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

CVE-2019-5485

NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repository name.

CVSS 3.1 · 10.0 Critical EPSS 58.8% KEV · Not listed
Vendors
Gitlabhook Project
Products
Gitlabhook