THE content discusses the latest security updates for GitLab, addressing critical vulnerabilities related to Duo AI, including flaws that could lead to GitLab Runner hijacking and denial of service (DoS). Access to detailed vulnerability reports is restricted to verified supporters. Additional security alerts regarding GitLab have been referenced, highlighting issues such as account takeover, code injection, and two-factor authentication bypass that have been patched in recent updates.
GitLab fixes Duo AI bugs that could hijack runners, cause DoS
Article by CyberSIXT