Threats tagged 'bit-gitlab-2026-14288'

A vulnerability in GitLab Enterprise Edition versions from 17.4 up to but not including 19.3.6, 19.4 up to but not including 19.4.3, and 19.5 up to but not including 19.5.1 could allow an authenticated user to bypass a required merge request approval policy on a protected branch. This occurs due to improper access control during approval rule synchronization. The issue has been fixed in versions 19.3.6, 19.4.3, and 19.5.1.