GitLab addressed arbitrary pipeline execution vulnerabilities multiple times this year, including CVE-2024-6678 last month, CVE-2024-6385 in July, and CVE-2024-5655 in June, all rated critical.

GitLab warned today that a critical vulnerability in its product's GitLab Community and Enterprise editions allows attackers to run pipeline jobs as any other user.

GitLab and IBM are expanding their partnership to bridge mainframe and cloud-native development with seamless integration, CI/CD runner support, end-to-end visibility, and cost efficiency. GitLab and ...