| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 11.3, < 14.1.7≥ 11.3.0, < 14.1.7≥ 14.2, < 14.2.5≥ 14.3.0, < 14.3.1 | 14.1.714.2.514.3.1 |
In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of private groups.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free