Skip to content
OpenAdvisories

Package · npm

gitlabhook

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 10.0
    CVE-2019-5485 Public exploit EPSS 59%

    Command Injection in gitlabhook

    NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repository name.

    gitlabhook npm