| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 17.10.0, < 18.9.7≥ 18.10.0, < 18.10.6≥ 18.11.0, < 18.11.3 | 18.9.718.10.618.11.3 |
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with developer-role permissions to delete protected container registry tags due to improper authorization checks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free