| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 14.3, < 14.3.6≥ 14.4, < 14.4.4≥ 14.5, < 14.5.2 | 14.3.614.4.414.5.2 |
Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed an attacker to exploit XSS by abusing the generation of the HTML code related to emojis
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free