| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 11.2.0, < 13.2.10≥ 13.3.0, < 13.3.7≥ 13.4.0, < 13.4.2 | 13.2.1013.3.713.4.2 |
Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free