Threats tagged 'bit-gitlab-2026-9204'

A Server-Side Request Forgery (SSRF) vulnerability in GitLab CE/EE versions 18.10.0 through before 18.10.8, 18.11.0 through before 18.11.5, and 19.0.0 through before 19.0.2 could allow an authenticated user to read arbitrary files from the Gitaly server and access internal network resources during repository import due to insufficient validation of secondary URLs. This issue has been remediated in the specified fixed versions.