| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 13.0.0, < 14.6.5≥ 14.7.0, < 14.7.4≥ 14.8, < 14.8.2 | 14.6.514.7.414.8.2 |
An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with restricted sign-ups may be vulnerable to user enumeration to unauthenticated users through the GraphQL API.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free