Threats tagged 'bit-gitlab-2026-105711'

A vulnerability in GitLab CE/EE versions from 15.0 up to but not including 19.3.6, 19.4 up to 19.4.3, and 19.5 up to 19.5.1 allowed authenticated users without project membership to read confidential issue titles from private projects when referenced in merge requests of public projects. This occurred due to a cache key that improperly shared rendered content across users, exposing sensitive information.