| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 16.5.0≥ 16.0.0, < 16.3.6≥ 16.4.0, < 16.4.2 | 16.3.616.4.2 |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, and all versions starting from 16.5.0 before 16.5.1 which have the `super_sidebar_logged_out` feature flag enabled. Affected versions with this default-disabled feature flag enabled may unintentionally disclose GitLab version metadata to unauthorized actors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free