| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 18.3.0, < 18.3.4≥ 18.4.0, < 18.4.2 | 18.3.418.4.2 |
GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed authenticated users with read-only API tokens to perform unauthorized write operations on vulnerability records by exploiting incorrectly scoped GraphQL mutations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free