Execute environment stop actions as the owner of the stop action job 	Critical
Prevent code injection in Product Analytics funnels YAML 	High
SSRF via Dependency Proxy 	High
Denial of Service via sending a large glm_source parameter 	High
CI_JOB_TOKEN can be used to obtain GitLab session token 	Medium
Variables from settings are not overwritten by PEP if a template is included 	Medium
Guests can disclose the full source code of projects using custom group-level templates 	Medium
IdentitiesController allows linking of arbitrary unclaimed provider identities 	Medium
Open redirect in repo/tree/:id endpoint can lead to account takeover through broken OAuth flow 	Medium
Open redirect in release permanent links can lead to account takeover through broken OAuth flow 	Medium
Guest user with Admin group member permission can edit custom role to gain other permissions 	Medium
Exposure of protected and masked CI/CD variables by abusing on-demand DAST 	Medium
Credentials disclosed when repository mirroring fails 	Medium
Commit information visible through release atom endpoint for guest users 	Medium
Dependency Proxy Credentials are Logged in Plaintext in graphql Logs 	Medium
User Application can spoof the redirect url 	Low
Group Developers can view group runners information 	Low