CVE-2020-10953

CVE-2020-10953 affects GitLab Enterprise Edition 11.7–12.9 where the NPM feature is vulnerable to a path traversal issue. The root cause is improper validation in the NPM package registry path handling, enabling access to locations outside of restricted directories. Impacts include potential expo...