| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 18.0.0, < 18.0.4≥ 18.1.0, < 18.1.2 | 18.0.418.1.2 |
An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that could have allowed authenticated maintainers to bypass group-level user invitation restrictions by sending crafted API requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free