| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 10.6.0, < 16.9.7≥ 16.10.0, < 16.10.5≥ 16.11.0, < 16.11.2 | 16.9.716.10.516.11.2 |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 in which cross-site request forgery may have been possible on GitLab instances configured to use JWT as an OmniAuth provider.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free