CVE-2021-22258: GitLab

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses

Affected products

• GitLab GitLab: from 8.9.0, before 14.0.9 (fixed in 14.0.9); from 14.1.0, before 14.1.4 (fixed in 14.1.4); from 14.2.0, before 14.2.2 (fixed in 14.2.2)

Published 2021-10-05. Last modified 2026-06-17.