| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | < 12.3.3 | 12.3.3 |
An improper access control vulnerability exists in GitLab <12.3.3 that allows an attacker to obtain container and dependency scanning reports through the merge request widget even though public pipelines were disabled.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free