GitLab Patches Code Execution, Information Disclosure Vulnerabilities

GitLab has released security updates fixing 13 vulnerabilities, including three high-severity flaws that could allow attackers to execute malicious code or access sensitive information. The most serious issues include cross-site scripting vulnerabilities in the Analytics dashboard and Web IDE that could let attackers run code in users' browser sessions, plus a flaw in Duo Workflows that could expose confidential project data. Users are strongly urged to upgrade immediately to patched versions, with GitLab noting that its own cloud service is already running the secure version.