CVE-2021-22189: GitLab

High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days.

Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the certificates for the Fortinet OTP that could result in authentication issues.

Affected products

• GitLab GitLab: before 13.6.7 (fixed in 13.6.7); from 13.7.0, before 13.7.7 (fixed in 13.7.7); from 13.8.0, before 13.8.4 (fixed in 13.8.4)

Published 2021-03-04. Last modified 2026-06-17.