| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 10.0.0, < 14.6.5≥ 14.7.0, < 14.7.4≥ 14.8.0, < 14.8.2 | 14.6.514.7.414.8.2 |
Improper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed an attacker to steal environment variables via specially crafted email addresses.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free