- Official Post
Given I know a few people self-host Gitlab in this community, this might be relevant:
| gitlab -- gitlab | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. A malicious maintainer could exfiltrate a GitHub integration's access token by modifying the integration URL such that authenticated requests are sent to an attacker controlled server. | 2022-10-28 | 4.3 | CVE-2022-2882 MISC MISC CONFIRM |
| gitlab -- gitlab | An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. TODO | 2022-10-28 | not yet calculated | CVE-2022-2826 CONFIRM MISC MISC |