CVE-2019-5485: Gitlabhook Project Gitlabhook

Critical severity, CVSS 10.0. EPSS: 58.8% chance of exploitation in the next 30 days.

NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repository name.

Affected products

Published 2019-09-13. Last modified 2026-06-17.