12.8.2

DATE	CVE	VULNERABILITY TITLE	RISK
2020-03-27	CVE-2020-10954	Resource Exhaustion vulnerability in Gitlab GitLab through 12.9 is affected by a potential DoS in repository archive download. network low complexity gitlab CWE-400	5.0
2020-03-27	CVE-2020-10953	Path Traversal vulnerability in Gitlab In GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue. network low complexity gitlab CWE-22	5.0
2020-03-27	CVE-2020-10952	Incorrect Authorization vulnerability in Gitlab GitLab EE/CE 8.11 through 12.9.1 allows blocked users to pull/push docker images. network gitlab CWE-863	5.8
2020-03-12	CVE-2020-10535	Unspecified vulnerability in Gitlab GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email domain restrictions within the two-day grace period for an unconfirmed email address. network gitlab	4.3