| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 15.10.0, < 18.10.8≥ 18.11.0, < 18.11.5≥ 19.0.0, < 19.0.2 | 18.10.818.11.519.0.2 |
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to modify hidden merge requests due to incorrect authorization enforcements.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free