| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 10.0, < 12.9.8≥ 12.10.0, < 12.10.7≥ 13.0, < 13.0.1 | 12.9.812.10.713.0.1 |
An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. A user with the role of developer could use the import project feature to leak CI/CD variables.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free