| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 17.0.0, < 17.1.6≥ 17.2.0, < 17.2.4≥ 17.3.0, < 17.3.1 | 17.1.617.2.417.3.1 |
An issue was discovered in GitLab EE affecting all versions starting 17.0 to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1 allows an attacker to execute arbitrary command in a victim's pipeline through prompt injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free