| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 19.1.0, < 19.2.8≥ 19.3.0, < 19.3.5≥ 19.4.0, < 19.4.2 | 19.2.819.3.519.4.2 |
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a project-scoped fine-grained Personal Access Token to modify integrations belonging to a group outside the token's scope, due to incorrect authorization checks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free