Threats tagged 'ghsa-wf8r-f3x5-5p4r'

A vulnerability in GitLab CE/EE versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 allowed authenticated users with developer-role permissions to execute CI/CD pipelines on protected branches without having the required push permissions. This was due to improper authorization in pipeline reference validation. The issue has been remediated in the specified fixed versions.