13.6.1

DATE	CVE	VULNERABILITY TITLE	RISK
2021-01-15	CVE-2021-22167	Unspecified vulnerability in Gitlab An issue has been discovered in GitLab affecting all versions starting from 12.1. network low complexity gitlab	5.0
2021-01-15	CVE-2020-26414	Unspecified vulnerability in Gitlab An issue has been discovered in GitLab affecting all versions starting from 12.4. network low complexity gitlab	4.0
2020-12-11	CVE-2020-26416	Information Exposure vulnerability in Gitlab Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. local low complexity gitlab CWE-200	2.1
2020-12-11	CVE-2020-26415	Information Exposure vulnerability in Gitlab Information about the starred projects for private user profiles was exposed via the GraphQL API starting from 12.2 via the REST API. network low complexity gitlab CWE-200	4.0
2020-12-11	CVE-2020-26412	Information Exposure vulnerability in Gitlab Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 13.2 before 13.6.2. network low complexity gitlab CWE-200	4.0
2020-12-11	CVE-2020-26408	Information Exposure vulnerability in Gitlab A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2 that allows an attacker to view limited information in user's private profile network low complexity gitlab CWE-200	5.0
2020-12-11	CVE-2020-26409	Improper Input Validation vulnerability in Gitlab A DOS vulnerability exists in Gitlab CE/EE >=10.3, <13.4.7,>=13.5, <13.5.5,>=13.6, <13.6.2 that allows an attacker to trigger uncontrolled resource by bypassing input validation in markdown fields. network low complexity gitlab CWE-20	4.0