CVE-2021-22229: GitLab

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.8. Under a special condition it was possible to access data of an internal repository through project fork done by a project member.

Affected products

• GitLab GitLab: from 12.8, before 13.11.6 (fixed in 13.11.6); from 13.12.0, before 13.12.6 (fixed in 13.12.6); from 14.0.0, before 14.0.2 (fixed in 14.0.2)

Published 2021-07-06. Last modified 2026-06-17.