npm/gitlabhook CVE-2019-5485: critical 10, EPSS 58.80%
Command Injection in gitlabhook
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.0.17 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-549f-73hh-mj38
- https://nvd.nist.gov/vuln/detail/CVE-2019-5485
- https://hackerone.com/reports/685447
- http://packetstormsecurity.com/files/154598/NPMJS-gitlabhook-0.0.17-Remote-Command-Execution.html
CVE-2019-5485 · published · modified · JSON