| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 16.4.0≥ 16.3.0, < 16.3.5≥ 9.5.0, < 16.2.8 | 16.3.516.2.8 |
| consul | = 1.1.0≥ 1.0.0, < 1.0.8≥ 1.2.0, < 1.2.4< 0.9.4 | 1.0.81.2.40.9.4 |
Patch in third party library Consul requires 'enable-script-checks' to be set to False. This was required to enable a patch by the vendor. Without this setting the patch could be bypassed. This only affects GitLab-EE.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free