GitLab has released critical updates to address multiple vulnerabilities, the most severe of them (CVE-2024-6678) allowing an attacker to trigger pipelines as arbitrary users under certain conditions.

GitLab addressed arbitrary pipeline execution vulnerabilities multiple times this year, including CVE-2024-6678 last month, CVE-2024-6385 in July, and CVE-2024-5655 in June, all rated critical.

GitLab has upgraded its Community and Enterprise editions to fix a critical vulnerability which allowed malicious actors to run pipeline jobs as any other platform user. In its patch release notes ...

After checking the pipeline file into the application's repository, the job moves into the queue. As soon as a GitLab runner is available, the defined steps run sequentially.

News. GrammaTech Partners with GitLab to Add Shift-Left Capabilities to the CI/CD Pipeline. By John K. Waters; March 11, 2021; App security testing tools provider GrammaTech today announced a ...

SAN FRANCISCO--(BUSINESS WIRE)--OverOps, the leading continuous reliability solution, today announced a new integration and partnership with GitLab, the single application for the DevOps lifecycle ...