| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 13.7.0, < 18.2.8≥ 18.3.0, < 18.3.4≥ 18.4.0, < 18.4.2 | 18.2.818.3.418.4.2 |
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 to 18.2.8, 18.3 before 18.3.4, and 18.4 before 18.4.2 that could have allowed authenticated users without project membership to view sensitive manual CI/CD variables by querying the GraphQL API.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free