GitLab addressed arbitrary pipeline execution vulnerabilities multiple times this year, including CVE-2024-6678 last month, CVE-2024-6385 in July, and CVE-2024-5655 in June, all rated critical.

SAN FRANCISCO--(BUSINESS WIRE)--OverOps, the leading continuous reliability solution, today announced a new integration and partnership with GitLab, the single application for the DevOps lifecycle ...

A critical vulnerability is affecting certain versions of GitLab Community and Enterprise Edition products, which could be exploited to run pipelines as any user. GitLab is a popular web-based ...