GitLab Patches Maximum-Severity Flaw Letting Unauthenticated Attackers Run Code
GitLab has patched a flaw rated at the maximum CVSS severity, which allowed unauthenticated attackers to achieve remote code execution on self-hosted instances. Because the defect is present across releases spanning roughly twelve years, a large number of organisations running self-hosted deployments need to patch and verify within the same narrow window.